PPT Slide
- RFC 2724 proposes new kinds of flow attribute, including multi-valued ones
- It defines a general way of retrieving distributions (as an array of counters) for such attributes
- Attributes implemented in NeTraMet include:
- To/From Packet Size
- To/From Bit/Packet rate for specified (e.g. 10s) intervals
- Packet Turnaround time (e.g. ping, DNS, TCP syn/ack)
- TCP stream duration
- DSCodePoint (for DiffServ)
- To/From ASN