7 May
2014
7 May
'14
10:38 a.m.
On 05/07/14 15:11 +0200, Antoine Meillet wrote:
Hello,
I'm currently writing a paper for school and I talk about net neutrality which brings the subject of NetFlow/IPFIX.
Should those protocols be considered as tools to perform DPI ?
That question can be taken a couple of ways. Netflow is useful for calculating information useful to providers and operators through sampling of data on high bandwidth links, where performing DPI is not feasible or desired. It is not a robust solution for DPI - or analysis of higher layer packet data, which is typically performed by a mirrored interface or an inline box/firewall that can perform high speed forwarding. -- Dan White