IPFIX


Also found in: Acronyms.

IPFIX

(IP Flow Information EXport) An IETF protocol for IP packet analysis, originally from Cisco. All the packets passing through the network device are analyzed, and IPFIX generates "flow record" summaries of packets with the same attributes. The flow records are cached, and the cache is periodically flushed and sent to the traffic analysis application. See sFlow.
Copyright © 1981-2019 by The Computer Language Company Inc. All Rights reserved. THIS DEFINITION IS FOR PERSONAL USE ONLY. All other reproduction is strictly prohibited without permission from the publisher.
References in periodicals archive ?
Aitken, "Specification of the IP flow information export (IPFIX) protocol for the exchange of flow information," RFC 7011, 2013.
[27] Youngseok Lee, Seongho Shin, Taeck-geun Kwon, "Signature-Aware Traffic Monitoring with IPFIX" [in:] Lecture Notes in Computer Science, 2006, Volume 4238/2006, pp.
Bond now gets NetFlow data from all Cisco routers on his LAN, as well as IPFIX data from the Nortel routers on the ATM backbone.
StealthWatch 6.2 include features such as: virtualised deployment options for the StealthWatch Management Console and StealthWatch FlowCollector; integration with the Cisco Identity Services Engine (ISE) for enhanced identity and device awareness; enhanced mobile device security for addressing BYOD challenges; new levels of application awareness through the use of advanced URL data; support for IPFIX, enabling users to embrace next-generation flow protocols; FIPS 140-2 support through RSA BSAFE Crypto-J; and support for flow data from Palo Alto Networks' Next-Generation Enterprise Firewalls.
The second tool is IP flow information export (IPFIX), which gives routers and switches the ability to collect IP network traffic data.
FlowMon is a complete solution for network traffic monitoring and security based on IP flow monitoring (NetFlow / IPFIX / sFlow) and Network Behavior Analysis (NBA) technologies.
Thanks to this customized plugin, the probes monitor traffic at the Ethernet-layer and use a modified process of flow creation (source and destination MAC addresses, VLAN ID and Ethernet type are used as key-fields, among others; non key-fields statistics provided are Ethernet header length, Ethernet payload length etc.) The measured statistics are exported to IPFIX collectors for storage and analysis.