SFlow

SFlow

sFlow is a relatively new standard for monitoring computer networks. sFlow specification (RFC 3176) and its first implementation were both launched in 2001.

sFlow

The sFlow standard describes a mechanism to capture traffic data in switched or routed networks. It uses a sampling technology to collect statistics from the device and is for this reason applicable to high speed networks (at gigabit speeds or higher).

An sFlow agent is the implementation of the sampling mechanism on the hardware (for example a switch). The sFlow collector is a central server which collects the sFlow datagrams from all agents to store or (later) analyze them. The sFlow agent uses two forms of operation: statistical packet-based sampling of switched or routed packets, and time-based sampling of interface counters.

Flow samples

Based on a defined sampling rate, either for the complete agent or for a single interface, 1 out of N packets is captured and sent to a collector server. This type of sampling does not provide a 100% accurate result in the analysis but it does provide a result with quantifiable accuracy.

Counter samples

A polling interval defines how often the sFlow octet and packet counter for a specific interface are sent to the collector, but an sFlow agent is free to schedule polling in order maximize internal efficiency. If the regular schedule is chosen, each counter start time will be chosen differently to smoothen performance.

sFlow Datagram

The sampled data is sent as a UDP packet to the specified host and port on the sFlow collector. The default port is 6343. The lack of reliability in the UDP transport mechanism does not significantly affect the accuracy of the measurements obtained from an sFlow agent. If counter samples are lost then new values will be sent when the next polling interval has passed. The loss of packet flow samples is a slight reduction in the effective sampling rate.

The UDP payload contains the sFlow datagram. Each datagram provides information about the sFlow version, its originating agent’s IP address, a sequence number, how many samples it contains and usually up to 10 flow samples or counter samples.

RFC 3176 defines sFlow version 2 through 4. A memo by InMon Corp. describes sFlow 5. [cite web
url = http://sflow.org/sflow_version_5.txt
title = sFlow Version 5
first = Peter | last = Phaal | coauthors = Marc Lavine
year = 2004 | month = July
]

ee also

* Netflow

References

External links

* [http://www.sflow.org/ Official site]
* [http://tools.ietf.org/html/rfc3176 RFC 3176]


Wikimedia Foundation. 2010.

Игры ⚽ Нужна курсовая?

Look at other dictionaries:

  • SFlow — ist ein Standard zur Überwachung von Rechnernetzen, der im Jahr 2001 im RFC 3176 vorgestellt wurde. sFlow beschreibt einen Mechanismus, den über einen Switch oder Router fließenden Netzwerkverkehr statistisch zu erfassen und zur Analyse an einen… …   Deutsch Wikipedia

  • Scrutinizer — NetFlow sFlow Analyzer is software developed by Plixer International that collects flows from capable routers and switches, and reports on top applications and top hosts on a per interface basis. The software provides details on how much… …   Wikipedia

  • Netflow — architecture NetFlow is a network protocol developed by Cisco Systems for collecting IP traffic information. NetFlow has become an industry standard for traffic monitoring and is supported by platforms other than Cisco IOS and NXOS such as… …   Wikipedia

  • Netflow — ist eine Technik, bei der ein Gerät, in der Regel ein Router oder Layer 3 Switch, Informationen über den IP Datenstrom in das Gerät per UDP exportiert. Diese UDP Datagramme werden von einem Netflow Kollektor empfangen, gespeichert und verarbeitet …   Deutsch Wikipedia

  • Netflow — NetFlow  сетевой протокол, предназначенный для учёта сетевого трафика, разработанный компанией Cisco Systems. Является фактическим промышленным стандартом и поддерживается не только оборудованием Cisco, но и многими другими устройствами (в… …   Википедия

  • Network traffic measurement — In computer networks, network traffic measurement is the process of measuring the amount and type of traffic on a particular network. This is especially important with regard to effective bandwidth management. Contents 1 Tools 1.1 Functions and… …   Wikipedia

  • RMON — The Remote Network MONitoring (RMON) MIB was developed by the IETF to support monitoring and protocol analysis of LANs. The original version (sometimes referred to as RMON1) focused on OSI Layer 1 and Layer 2 information in Ethernet and Token… …   Wikipedia

  • ProCurve Manager — (PCM) is a Comprehensive Network Management suite for products and solutions by ProCurve Networking, a division of HP. Versions ProCurve Manager comes in two versions; a base version supplied both free of charge with all managed ProCurve Products …   Wikipedia

  • Liste der standardisierten Ports — Die folgende Liste enthält die Zuordnung von Ports zu Protokollen, die von der IANA standardisiert wurden. Eine vollständige Liste kann unter Unixoiden Betriebssystemen in der Datei /etc/services eingesehen werden. Inhaltsverzeichnis 1 Legende 2… …   Deutsch Wikipedia

  • External Data Representation — (XDR) is an IETF standard from 1995 of the presentation layer in the OSI model. XDR allows data to be wrapped in an architecture independent manner so data can be transferred between heterogeneous computer systems. Converting from the local… …   Wikipedia

Share the article and excerpts

Direct link
Do a right-click on the link above
and select “Copy Link”