untitled

Size: px

Start display at page:

Download "untitled"

せぴあひめい
7 years ago
Views:

5 Section 1 5

6 6

7 MRTG 7 Prefix RMON NetFlow

8 NetFlow NetFlow Data Collector DB Subnet B B Router = Exporter Subnet A AS IP Prefix 1 8 Subnet B Router = Exporter AS AS Prefix 2

9 NetFlow Version 5 AS AS Peer AS Origin AS Next Hop / In Out ifindex IP ICMP, TCP, UDP,... TOS TCP 9

10 Exporter CPU Cisco NetFlow Performance Analysis CPU 10

11 Exporter Cisco 11

12 Exporter Juniper M M (1) 12 firewall { filter sample-all { term one { then { sample; accept; } } } }

13 Exporter Juniper M M (2) 13 interfaces { ge-0/0/0 { description Sampling Interface"; link-mode full-duplex; unit 0 { family inet { filter { input sample-all; # Input output sample-all; # Output } address ***.***.***.***/30; } } }

unit 0 { family inet { filter { input sample-all; # Input

14 Exporter Juniper M M (3) 14 forwarding-options { sampling { traceoptions { file sampled-debug size 5m; # Debug } input { family inet { max-packets-per-second 1000; # PPS rate 5000; # run-length 0; } } output { cflowd ***.***.***.*** { # port ****; # UDP version 5; # NetFlow autonomous-system-type origin; # Src/Dst AS Origin } } } }

# PPS rate 5000; # run-length 0; } } output { cflowd ***.

15 15 Exporter router: router: ifindex: ifindex: period: period: 02/21/ /21/ :14:46 Src 15:14: /21/2006 AS Dst 02/21/ :32:49 15:32:49 JST AS JST Src Src AS AS Dst Dst AS AS Pkts Pkts Pkts/sec Pkts/sec Bytes Bytes Bits/sec Bits/sec router: router: ifindex: ifindex: router: period: period: 02/21/ /21/ :14:46 router: :14: /21/ !? ifindex: 02/21/ :32:49 15:32:49 JST JST Src Src AS AS Dst Dst AS ifindex: 20 AS Pkts 20 period: Pkts Pkts/sec Pkts/sec Bytes Bytes Bits/sec Bits/sec period: 01/01/ /01/ :00: :00: /21/ /21/ :59: :59:33 JST JST Src Src Network Network Dst Dst Network Network Pkts Pkts Bytes Bytes /32 router: router: / / / /32 ifindex: ifindex: / / / /32 period: period: 02/21/ /21/ :14: / /32 15:14: /21/ /21/ :32: / :32:49 JST /32 JST Src Src AS AS Dst Dst AS / /32 AS Pkts Pkts Pkts/sec / Pkts/sec Bytes Bytes Bits/sec /32 Bits/sec / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / /

------------- ------------- 0 0 0 0 810 810 0.747922 0.747922 666379 666379 4922.47 4922.47 router: router: 10.1.1.162 10.1.1.162 ifindex: ifindex: 22 22 router: period: period: 02/21/2006 02/21/2006 15:14:46 router: 10.

16 Collector/Analyzer Cisco ARBOR peakflow, GenieATM cflowd by CAIDA flow-tools nfdump/nfsen cflowd flow-tools 16

17 cflowd ARTS Origin AS Dest Prefix TCP Exporter FreeBSD 17

18 nfdump 18

19 NfSen NFDUMP Web 19

20 flow-tools NetFlow PostgresSQL, MySQL DB Ad-Hoc DWH flow-report 20

21 Excel S-PLUS R 21

22 Excel Src or Dst AS Excel Import 65,536 x 256 MS Office Excel 2003 Src AS, Dst AS, Prefix 22 Byte Src or Dst AS

23 R The R Project for Statistical Computing S R S 23

24 Section 2-24

33 Section 3 33

34 IP? Inbound : Outbound : 34

35 1. Outbound 24h? 35

36 % 7 8% 24 36

37 2. In Out Out In Out ADSL FTTH!? Outbound Traffic FTTH ADSL! 37 Inbound Traffic

38 In Out Out In Out In ADSL Out 1 10G FTTH ADSL, FTTH ISP Kenjiro Cho, Kensuke Fukuda, Hiroshi Esaki and Akira Kato. The Impact and Implications of the Growth in Residential User-to-User Traffic. SIGCOMM

39 ISP ISP 39 ISP : IP : IP ISP : 1 1 : 6 ISP =1/2048, =1/5000

40 ISP ISP IP? 40

41 Special Thanks to THX!! IIJ JANOG18 41

42 by VzB 42

untitled

untitled 25: Part ( ) Chief Technology Officer mshindo@fivefront.com SNMP MRTG HP/OV RMON INTERNET WEEK 2006/12/08 Copyright 2006 Fivefront Corporation, All Rights Reserved. 2 1 SNMP IfInUcastPkts, IfOutUcastPkts