Another role for IPFIX/NetFlow in the context of DPI (on top of PSAMP that was already mentioned by Roland) is to serve as a transport mechanism to travel flow data along with their DPI classification from probes to remote collectors, for persistent storage, analysis, etc. This model is supported on the export side by Cisco with their NetFlow/NBAR integration and on the collection side by some collector. Maybe this (*) recent university report from the good Tomasz Bujlov can be of interest to you. What i described above is specifically captured in chapters 3.4.6 and 3.5.6. Cheers, Paolo (*) http://vbn.aau.dk/files/78068418/report.pdf On Wed, May 07, 2014 at 03:11:59PM +0200, Antoine Meillet wrote:
Hello,
I'm currently writing a paper for school and I talk about net neutrality which brings the subject of NetFlow/IPFIX.
Should those protocols be considered as tools to perform DPI ?
Thanks, Antoine.