Worth Reading: Network Traffic Telemetry Protocols
Pavel Odintsov published a series of introductory blog posts describing protocols we can use to collect network traffic telemetry:
- Part 1 covers the ancient Netflow v5, Netflow v9, and IPFIX. It also mentions sampling and flow aggregation.
- Part 2 describes sFlow, port mirroring and sampled mirroring, and the use of IPFIX/Netflow v9 to transport mirrored traffic.
These blog posts will not make you an expert but will give you an excellent overview of the telemetry landscape1.
-
Hint: more than enough to turn you into an instant AI-assisted LinkedIn
garbage generatorThought Leader™ 😜 ↩︎