重新审视Netflow样本和导出性能问题
Revisiting the Issues On Netflow Sample and Export Performance
摘要：
某些路由器链路上的数据包数量和数据包速率很高，这使得路由器很难检查每个数据包，以便详细统计通过路由器的流量。采样通常应用在路由器上，以便限制路由器在评估流信息以用于监视目的时必须承担的信息收集所引起的负载。几乎所有情况下的采样过程都是确定性过程，即在每个接口的基础上在每N个分组中选择1，然后基于所收集的采样统计数据形成流统计数据。即使这种采样对于某些统计数据（如数据包速率）可能不重要，但其他统计数据可能会严重失真。然而，重要的是要考虑采样技术及其相对准确性时，适用于不同的流量模式。采样的主要缺点是与原始流量流相比，所收集的轨迹的准确性降低。到目前为止，还没有一个详细的分析在路由器上的采样在各种流量配置文件和流量标准的影响。在本文中，我们详细评估了NetFlow中使用的采样过程的性能，并讨论了一些补偿监控细节丢失的技术。
英文摘要：
The high volume of packets and packet rates of traffic on some router links makes it exceedingly difficult for routers to examine every packet in order to keep detailed statistics about the traffic which is traversing the router. Sampling is commonly applied on routers in order to limit the load incurred by the collection of information that the router has to undertake when evaluating flow information for monitoring purposes. The sampling process in nearly all cases is a deterministic process of choosing 1 in every N packets on a per-interface basis, and then forming the flow statistics based on the collected sampled statistics. Even though this sampling may not be significant for some statistics, such as packet rate, others can be severely distorted. However, it is important to consider the sampling techniques and their relative accuracy when applied to different traffic patterns. The main disadvantage of sampling is the loss of accuracy in the collected trace when compared to the original traffic stream. To date there has not been a detailed analysis of the impact of sampling at a router in various traffic profiles and flow criteria. In this paper, we assess the performance of the sampling process as used in NetFlow in detail, and we discuss some techniques for the compensation of loss of monitoring detail.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
