I spent last week at SHARKFEST in Palo Alto, California.  The folks at Cace Technologies did a great job organizing the event.  The kick off presenter was Van Jacobson who was the creator of spiffy utilities like traceroute and tcpdump

It was great to see how the first packet analyzer came about.  He also discussed collecting NetFlow and some of the issues surrounding the volume of data that can be created.  He even made some suggestions on NetFlow reporting using something called Linear Least-Squares Segmentation.  Interesting stuff, I was trying to thing of a ways we could implement some of his ideas into our sFlow, IPFIX and  NetFlow Analyzer.

Nice job Van, your presentation was great.

I also presented a 75 minute lecture on “Where NetFlow and Packet Capture Complement each Other” that you can watch if you have time on your hands.

My wireshark skills aren’t awesome, but I seemed to get my point across.  My agenda included:

  • Ingress Vs. Egress
  • Advanced filtering to narrow in on problems
  • How and when to leverage reports
  • The differences between NetFlow and Packet Capture
  • Where the Technology is going

See some of the other SHARKFEST presenters here. Maybe I’ll see you there next year?

Mike Patterson author pic


Michael is one of the Co-founders and the former product manager for Scrutinizer. He enjoys many outdoor winter sports and often takes videos when he is snowmobiling, ice fishing or sledding with his kids. Cold weather and lots of snow make the best winters as far as he is concerned. Prior to starting Somix and Plixer, Mike worked in technical support at Cabletron Systems, acquired his Novell CNE and then moved to the training department for a few years. While in training he finished his Masters in Computer Information Systems from Southern New Hampshire University and then left technical training to pursue a new skill set in Professional Services. In 1998 he left the 'Tron' to start Somix which later became Plixer.


Big Data

Sankey Flow Graph

One of the greatest benefits of NetFlow collection for traffic analysis, is we’re provided with the ability to visualize the…

Leave a Reply