NetFlow is a protocol used to collect metadata about network traffic traversing a network device (such as a router, switch, or host). Network operators can use NetFlow data to monitor bandwidth, determine network throughput, measure packet loss, and understand traffic congestion at a specific interface level.
The ability to characterize IP traffic and understand how and where it flows is critical for ensuring network availability, performance, and security. A NetFlow analyzer is a tool deployed to perform monitoring, troubleshooting and in-depth inspection, interpretation, and synthesis of traffic flow data. Analyzing NetFlow facilitates more accurate capacity planning and ensures that resources are used appropriately in support of organizational goals. It helps network operators to determine where to apply Quality of Service (QoS) policies as well as how to optimize resource usage, and it plays a vital role in network security to detect Distributed Denial-of-Service (DDoS) attacks and other undesirable network events and activity.
Various organizations such as network operations, engineering, planning, architecture, and security can use NetFlow analysis as a primary source of intelligence. Proper use of a NetFlow traffic analyzer can reduce the number of hardware and software technologies needed to manage networks. This reduces network administration costs and enhances cross-organizational collaboration and communications and helps cross-functional teams get the most out of network investments.
NetFlow data enables network managers to gain a detailed, time-based view of application usage over the network. Any common NetFlow type can be used to recognize applications by port/protocol, and some of the more advanced extensions to NetFlow (via sFlow or v9/IPFIX templates) such as Cisco’s Application Visibility and Control (AVC) solution can document much greater application detail. Content and service providers may utilize this information to plan and allocate network and application resources (e.g., web server sizing and location) to responsively meet customer demands. Enterprises can use these same insights to understand application dependencies and resource consumption.
NetFlow tool-based analysis offers insights to overcome many common challenges encountered by network operators, managers, and engineers including:
Various organizations such as network operations, engineering, planning, architecture, and security can use NetFlow tools as a primary source of intelligence. Proper use of NetFlow tool-based analysis can reduce the number of hardware and software technologies needed to manage networks. This reduces network administration costs and enhances cross-organizational collaboration and communications and help cross-functional teams get the most out of network investments.
NetFlow data provides key information for sophisticated analysis to optimize both strategic network planning (e.g., who to peer with, backbone upgrade planning, routing policy planning) as well as tactical network engineering decisions (e.g., adding additional VIPs to routers, upgrading link capacity) –- minimizing the total cost of network operations while maximizing network performance, capacity and reliability.
NetFlow data enables network operators to gain detailed understanding of customer/user utilization of network and application resources. This information may then be utilized to efficiently plan and allocate access, backbone and application resources as well as to detect and resolve potential security and policy violations.
To learn more about how Kentik’s network observability solutions can help you plan, run, and fix any network or cloud, request a demo of Kentik’s NetFlow tools.
Related Kentipedia entries: