Enhanced netflow version 9 (e-Netflow v9) for network mediation: structure, experiment and analysis

Abstract

The Netflow version 9 is the latest Netflow version introduced by CISCO for the network monitoring and analysis purposes. Then come IPFIX that defined by IETF to overcome problem in Netflow version 9 and to enhance few aspect of network flow capturing and filtering. It cooperated with PSAMP (packet sampling) standard for intelligent packet sampling for flow monitoring. This research paper will introduce enhanced Netflow version 9 (e-Netflow v9) that use nProbe GPL tool. The enhance Netflow version 9 uses existing Netflow v9 parameters with RTP and SIP plug-ins. We will introduce the overall of structure this Netflow, the experiment to compare the result and performance and the finally analysis parts to study the reliability of this e-Netflow v9.