Monitoring Your Network with CoralReef
(or “How to let your users find the best porn sites for you”)

Outline

What is CoralReef?

Tapping your network

Some basic commands

What are flows?

Flow aggregation
(by source ip)

Some flow analysis commands

Real LifeTM example

Real Life Example

Who's the bad host?

Other things to see and do
(partial list)

Conclusions

Cooperative Association for Internet Data Analysis (CAIDA)
San Diego Supercomputer Center

Computer Science & Engineering
University of California, San Diego

http://www.caida.org/
tools/measurement/coralreef/