Flow Selection and Aggregation MA
From GEANT2-JRA1 Wiki
Flowsa-ma navigation
This page describes the design, implementation and installation details of the perfSONAR Flow Selection and Aggregation Measurement Archive.
Description
The Flow Selection and Aggregation MA acts as a perfSONAR interface wrapper around the functionality of the flow capturing and processing tool nfdump. This makes it possible to perform remote flow selection and aggregation requests. The MA is accompanied by a ready-to-use plugin for perfsonarUI that gives access to all available functionality.
The users that this MA is aimed at include security experts (for example, CERT members), PERT members and NOC personnel. Once properly authenticated and authorised, users can perform remote nfdump style selection and aggregation queries on stored log files. This enables them to search for security related information, and to debug network related problems. Depending on the storage capacity of the MA, queries can be performed on flow information from weeks or even moths ago.
The MA supports the following types of data request/response pairs:
- flowStatistics
- return statistical information about the selected flows from a given group of routers (how many TCP, UDP, ICMP and other flows, packets and bytes).
- rawFlows
- return specific fields from the selected flows. An optional nfdump style filter rule can be used to limit the number of matching flows and/or an aggregation rule can be used to accumulate information.
- topFlows
- return the top N flows given a nfdump style top filter rule.
PerfSONAR administrative details:
- Service Name: ps-mdm-flowsa-ma
- Service Type: MA
- Service Description: Measurement Archive service for flow selection and aggreagion
- Contact information: [Hans Trompert]
Check our bugzilla page to look at open bugs or submit new bugs.
