Appflow - categorizing network traffic at 10Gbps using commodity hardware

Appflow is based on the IPFIX probe nProbe that uses deep packet inspection to categorize network traffic according to the applications generating the traffic. To be able to scale to a high number of probes, Appflow aggregates the flow records in real time and exports aggregated data using IPFIX. For each detected application, top source and destination country and AS number is also exported. We also do separate statistics for both IPv4 and IPv6 traffic. In this lightning talk we want to give a quick overview of Appflow and show some screenshots of the web interface.


Part of session

Thunderbolts and Lightning

Related documents