ANALYSIS OF NETWORK MONITORING SYSTEM USING NETFLOW & SFLOW WITH SILK, NFDUMP, AND NPROBE AS FLOW COLLECTOR

• Main Author: Saputra, Rizky
• Format: Final Project
• Language: Indonesia
• Online Access: https://digilib.itb.ac.id/gdl/view/42446
• Institution: Institut Teknologi Bandung

Computer networks is the fundamental infrastructure needed for a computer system to connect and communicate with each other. Therefore, if something happens that disturbs the performance of a computer network, the performance of the system will be hampered. This thing will cause bad impact, both in terms of technical and financial. One of the best ways to anticipate disruptions in computer networks from both external and internal attacks (such as down network devices), we can use a Network Monitoring System. Network monitoring system is a system used to monitor the condition of a network in order to avoid anomalies or disruptions in the computer network. Network monitoring system is run by utilizing protocols made by vendors such as NetFlow (made by Cisco) and sFlow (made by HP) which are commonly used for network monitoring systems. To store data from network monitoring results, third-party software commonly used is called a flow collector. Commonly used flow collectors are SiLK (System for Internet-Level Knowledge), NFDUMP, and nProbe. This Final Project aims to examine the performance of the two network monitoring system protocols (NetFlow and sFlow) and the three collectors (SiLK, NFDUMP, and nProbe). The research method used to complete this Final Project is by conducting literatures and experiments. The experiments are carried out to prove the workings and features of the protocols and the flow collectors. The expected outcome of this Final Project is to provide a description of the differences between the protocols and the flow collectors and give recommendations for the use of protocols and flow collectors in a certain condition and need.