SlideShare une entreprise Scribd logo
1  sur  40
Application Visibility and Experience
through Flexible Netflow
Murali Erraguntala, Product Manager (merragun, @muralie)
Gurudutt Pai, Technical Marketing Engineer (gupai, @gurudatt28227)
DEVNET-2047
https://cisco.box.com/v/CLUS-FNF
• Application Visibility and Control – Overview
• AVC Building Blocks (NBAR, Custom Application, PerfMon, FNF etc)
• Application Recognition
• Objective of AVC
• Application Visibility and Monitoring (Partners Role)
• Flexible Netflow – Traffic Statistics, Unified Monitoring, Granular Monitoring – URL Statistics
• Monitoring Applications including Voice and Video
• eZPM Profiles
Agenda
WHAT is AVC and WHY AVC is Required?
HOW Partners can add VALUE?
What is AVC
Enabling Application Aware Networks
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cross Vertical
Ecosystem
Partners
Application Visibility and Control - Overview
Ubiquity
Service
Integration
Application
Richness
Analytics Billing Security
1400 +
Application
DEVNET-2047 4
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
End to End AVC
Support Matrix
Visibility Monitoring Control
Limited
Wireless (WLC, AP)
Distribution, Core
WAN Edge
Internet Edge
Data Center
Wired Access
Firewall & Security NA
Roadmap
For Your
Reference
DEVNET-2047 5
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
AVC Building Blocks
NBAR2
Protocol
Pack
Custom Signature
URL Port
IP
Address
SSL PPDK
Flexible
NetFlow
PerfMon
Application
Recognition
Reporting of Usage
(BW, Top Users,
Perf Metrics)
Troubleshoot
applications.
Business policy
driven routing
Delivers
Across
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Application
Awareness
Application
Analytics
Application
Control
Application
Experience
Deliver Best Application Experience
By Optimizing Utilization of Customer Networks
Through Simple, yet Powerful Ways of
And Minimizing IT Cost
On Device
Partner Products
Mandatory (FNF) Optional (APIs) Optional (FNF)
Application Reporting
Network Wide Visibility
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
• NetFlow is the de-facto mechanism to
provide visibility on network utilization
• Collect and export network information and
usage statistics and performance data
• Backward compatible with TNF records
• Flexibility in defining fields and flow record
format
• Utilize Netflow Version 9 format which is
extensible
• FNF supports IPFIX
• Consist of data collection (flow monitor)
and data export (flow export)
• Open-standard, can be analyzed by Cisco
Prime NAM, Cisco Prime Assurance
Manager, and 3rd Party Tools
Usage of FNF
• Analytics
• Capacity Planning
• Performance Monitoring
• Application Troubleshooting
• Billing
• Security
• Peering Traffic Monitoring
• MSP: Multi-Tenant Reports
Flexible Netflow (FNF)
App discovery (w/ NBAR2) and Bandwidth Usage Report
DEVNET-2047 9
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Key Fields Packet #1
Source IP 10.1.1.1
Destination IP 173.194.34.134
Source Port 20457
Destination Port 23
Layer 3 protocol 6
TOS byte 0
Ingres Interface Ethernet 0
Src. IP Dest. IP Src. Port Dest. Port Layer 3 Prot. TOS Byte Ingress Intf.
10.1.1.1 173.194.34.134. 20457 80 6 0 Ethernet 0
Key Fields Packet #2
Source IP 10.1.1.1
Destination IP 72.163.4.161
Source Port 30307
Destination Port 80
Layer 3 protocol 6
TOS byte 0
Ingres Interface Ethernet 0
Src. IP Dest. IP Src. Port Dest. Port Layer 3 Prot. TOS Byte Ingress Intf. App Name Timesta
mps
Byttes Packets
10.1.1.1 173.194.34.134 20457 80 6 0 Ethernet 0 HTTP
10.1.1.1 72.163.4.161 30307 80 6 0 Ethernet 0 Youtube
NetFlow cache
News
Flexible NetFlow - NBAR Integration
flow record app_record
match ipv4 source address
match ipv4 destination
address
match …..
match application name
First packet of a flow will create the Flow entry using the Key Fields”
Remaining packets of this flow will only update statistics (bytes,
counters, timestamps) DEVNET-2047 10
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Source
IP
Dest.
IP
Source
Port
Dest.
Port
Protocol TOS
Input
I/F
… Pkts
3.3.3.3 2.2.2.2 23 22078 6 0 E0 … 1100
Traffic Analysis Cache
Flow
Monitor 1
Traffic
Non-Key Fields
Packets
Bytes
Timestamps
Next Hop Address
Security Analysis Cache
Flow
Monitor 2
Metering Process
Multiple Monitors with Unique Key Fields
Key Fields Packet 1
Source IP 3.3.3.3
Destination IP 2.2.2.2
Source Port 23
Destination Port 22078
Layer 3 Protocol TCP - 6
TOS Byte 0
Input Interface Ethernet 0
Key Fields Packet 1
Source IP 3.3.3.3
Destination IP 2.2.2.2
Input Interface Gi0/1
Non-Key Fields
Packets
Timestamps
Source
IP
Dest.
IP
Input I/F … Pkts
3.3.3.3 2.2.2.2 Gi0/1 … 11000
DEVNET-2047 11
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Key Fields vs Non-Key Fields
match ipv4 dscp
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
collect interface output
collect counter bytes long
collect counter packets
collect policy qos class hierarchy
collect policy qos queue drops
• Uniquely identifies flow and
aggregates the usage statistics
• Flexible number of match
statements
• Identifies parameters to collect
and export
• Flexible number of collect
statements
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Where do I want my data sent?
What data do I want to meter?
Creates a new NetFlow cache
Attach the flow record
Exporter is attached to the cache
Potential sampling configuration
Configure NetFlow on the interface
flow exporter my-exporter
destination 1.1.1.1
flow record my-record
match ipv4 destination address
match ipv4 source address
collect counter bytes
flow monitor my-monitor
exporter my-exporter
record my-record
int s3/0
ip flow monitor my-monitor input
Flexible NetFlow – Configuration
Configure the Exporter
Configure the Flow Record
Configure the Flow Monitor
Configure the interface
DEVNET-2047 13
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Use Case #1 – Application Client-Server Stats
Traffic statistics per client and server
flow record RECORD-CLIENT-SERVER-STATS
match ipv4 dscp
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
match application name [account-on-resolution]
collect interface output
collect counter bytes long
collect counter packets
(..)
!
“match application name”: calls NBAR2
“account-on-resolution”: accurate accounting until
classification
flow record RECORD-CLIENT-SERVER-STATS
match application name [account-on-resolution]
collect interface output
collect counter bytes long
collect counter packets
(..)
!vs
DEVNET-2047 14
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Use Case #2 – IP Accounting Replacement
Collecting Per DSCP Usage – Example
flow record RECORD-FNF-DSCP-INGRESS
match ipv4 dscp
collect counter bytes long
collect counter packets long
collect application name
!
Flow record is created for each DSCP value
DEVNET-2047 15
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Flow Hierarchy Queue id
Flow 1 P1, C1, C11 1
Flow 2 P1, C1, C11 1
Flow 3 P1, C1, C12 2
Queue id Queue packet drops
1 100
2 20
• For each flow, the class hierarchy and queue drops can now be exported through FNF
• Class-ID to Name mapping provided through separate Option Templates
• QoS Class-ID, Queue Drops and Queue Hierarchy Export with FNF
Use Case #3 – QoS Queue Hierarchy Reports
flow record RECORD-QoS-Hierarchy
match ipv4 dscp
match interface input
collect policy qos class hierarchy
collect policy qos queue drops
!
policy-map P1
class C1
shaping average 16000000
service-policy child
policy-map child
class C11
bandwidth remaining percent 10
class C12
bandwidth remaining percent 70
class class-default
bandwidth remaining percent 20
class-map match-all C1
match any
class-map match-all C11
match ip dscp ef
class-map match-all C12
match ip dscp cs2
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
NBAR2 Field Extraction
• Ability to look into specific applications for
additional field information
• NBAR2 extracted fields from HTTP, RTP,
PCOIP, etc… for QoS configuration
• HTTP Header Fields
• Eases classification of voice and video traffic
• VoIP, streaming/real time video, audio/video
conferencing, Fax over IP
• Distinguishes between RTP packets based on
payload type and CODECS
• Some extracted fields within Flexible
NetFlow and Unified Monitoring
Overview
Protocol Fields Length FNF Configuration Syntax
HTTP URL * collect application http url
HTTP Host 50 collection application http host
HTTP User-agent 200 collection appllication http user-agent
HTTP Referer * collect application http referer
RTSP Host 50 collection application rtsp host-name
SMTP Server 50 collect application smtp server
SMTP Sender 50 collect application smtp sender
POP3 Server 50 collect application pop3 server
NNTP Group Name 50 collect application nntp group-name
SIP Source Domain 50 collect application sip source
SIP Destination
Domain
50 collect application sip destination
DEVNET-2047 17
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
NBAR2 HTTP Field Extraction
GET /weather/getForecast?time=37&&zipCode=95035 HTTP/1.1
Host: svcs.cnn.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:14.0)
Gecko/20100101 Firefox/14.0.1
Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cnn.com/US/
www.cnn.com
(IP=157.166.255.18)
http://www.cnn.com/US Se0/0/0
(IP=192.168.100.100)
 Ability to extract information from HTTP message
collect application
http URL collect application http host
collect application
http user-agent
collect application
http referer
DEVNET-2047 18
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Use Case #4 - Top Domain and URL Hit Count Report
Configuration Sample
• NBAR extracts fields from flows and exposes it into Application Response Time
Engine (ART).
• ISRG2/ASR1k: ART Metrics integrated with Unified Monitoring
• Requires IPFIX export for variable length fields (URL)
flow record type performance-monitor ART-RECORD-URL
match connection transaction-id
collect application http url
collect application http host
ASR1k – Unified Monitoring
flow record type mace PA-RECORD
collect application http uri statistics
collect application http host
!
ISR-G2k - Unified Monitoring & MACE (backward compatibility)
Using a
connection/transaction
records with export on
transaction-end. So hit count
=1, each URL is exported on
a different record.
ISRG2 supports MACE also
for backward compatibility
DEVNET-2047 19
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
NBAR2 Field Extraction
• NBAR2 Sub-application ID Format (variable length)
Sub-application ID Format
NBAR App ID Sub App ID Extracted Value
0x03000050 0x3402 www.cisco.com
4 bytes 2 bytes Variable length
NBAR Application ID, i.e.
0x03000050 = HTTP
NBAR Sub-application ID – from show ip nbar parameters
extraction and sub-application-table option template. Only
take the last two bytes, 0x3402 = HTTP Host
Extracted value
flow record MYRECORD
collect application http host
Engine ID Selector ID
1 byte 3 bytes
0x03 = port (IANA_L4_STANDARD, ID: 3)
0x000050 = 80
ASR1#sh flow exporter option application table | inc 3:80
3:80 http World Wide Web traffic
3:8080 http-alt HTTP Alternate
3:801 device device
13:80 cifs common internet file system
ASR1#
ASR1#sh ip nbar parameter extraction http
Protocol Parameter ID
-------- --------- --
http referer 209924
http user-agent 209923
http host 209922
http url 209921
ASR1#
0x33402
DEVNET-2047 20
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
NBAR2 Field Extraction
Sub-port Classification
Citrix Edonkey FastTrack Gmail Gnutella Kazaa2 RTP Webex-
meeting
ica-tag text-chat file-transfer file-transfer file-transfer file-transfer audio audio
app file-transfer video video
search-file-
name
payload-
type
payload-
type
Citrix: http://www.cisco.com/en/US/docs/ios/qos/command/reference/qos_m1.html#wp1037938
Fasttrack: http://www.cisco.com/en/US/docs/ios/qos/command/reference/qos_m1.html#wp1038015
Gnutella: http://www.cisco.com/en/US/docs/ios/qos/command/reference/qos_m1.html#wp1038081
RTP: http://www.cisco.com/en/US/docs/ios/qos/command/reference/qos_m1.html#wp1038481
HTTP: http://www.cisco.com/en/US/docs/ios/qos/command/reference/qos_m1.html#wp1058795
DEVNET-2047 21
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Application Attributes – Group Based Reports
1400 Apps
Traffic
Class
VoIP Telephony
Broadcast Video
Real-Time Interactive
Multimedia Conferencing
Multimedia Streaming
Network Control
Signaling
Ops / Admin / Mgmt (OAM)
Transactional Data
Bulk Data
Best Effort
Scavenger
Business Relevance
Business Relevant
Default
Business Irrelevant
DEVNET-2047 22
Application
Troubleshooting
Faster Isolation and Resolution
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
When users complain about Application Problem
Network is very
slow, I am not
able to get any
work done
ping?
show ip route?
traceroute?
show interface?
I don’t see any
thing wrong
Increased Latency
WAN Problems
Application Problems
Server Problems
User Problems
DEVNET-2047 24
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Application Performance Monitoring
Traffic
Statistics
HTTP HTTP
Voice and Video
Performance
(Perf-Mon)
Performance
Collection
30% of bandwidth
is voice and video
Critical Applications
Performance
(Application Response Time)
40% of bandwidth is
critical applications
What applications, how much bandwidth, flow direction?
(Flexible NetFlow and NBAR2)
• Perf-Mon monitors voice and video application for latency, delay, jitter
• ART monitors TCP applications for network/client/server delay
DEVNET-2047 25
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Use Case
• All IP Apps
• L3-L4 Metrics
Platforms
• ISR G2
• ASR1K/ XE
• Cat6K
• Cat4K
• 3850
• NAM
Use Case
• HTTP, TCP Apps
• L4-L7 Metrics
Platforms
• ISR G2
• ASR1K/ XE
• NAM
Use Case
• Voice, Video Apps
• L4 – L7 Metrics
Platforms
• ISR G2
• ASR1K/ XE
• Cat6K
• Cat4K
• Cat3K
• 3850
Performance Monitoring
Single Flow Record Type
• RTP SSRC
• RTP Jitter (min/max/mean)
• Transport Counter (expected/loss)
• Media Counter (bytes/packets/rate)
• Media Event
• Collection interval
• TCP MSS
• TCP round-trip time
• CND - Client Network Delay (min/max/sum)
• SND – Server Network Delay (min/max/sum)
• ND – Network Delay (min/max/sum)
• AD – Application Delay (min/max/sum)
• Total Response Time (min/max/sum)
• Total Transaction Time (min/max/sum)
• Number of New Connections
• Number of Late Responses
• Number of Responses by Response Time
• (7-bucket histogram)
• Number of Retransmissions
• Number of Transactions
• Client/Server Bytes
• Client/Server Packets
• L3 counter (bytes/packets)
• Flow event
• Flow direction
• Client and server address
• Source and destination address
• Transport information
• Input and output interfaces
• L3 information (TTL, DSCP, TOS, etc.)
• Application information (from NBAR2)
• Monitoring class hierarchy
Media Monitoring
Application Response
Time
Other Metrics
 All performance metrics are consolidated into one flow record type performance-monitor
DEVNET-2047 26
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Application Response Time
Network Path Segments
• Application response time provides insight into application behavior (network vs server bottleneck) to
accelerate problem isolation
• Separate application delivery path into multiple segments
• Server Network Delay (SND) approximates WAN Delay
• Latency per application
Application Servers
Total Delay
Client
Network
Clients
Client Network
Delay (CND)
Application
Delay (AD)
Network Delay (ND)
AVC
Server
Network
Request
Response Server Network Delay
(SND)
DEVNET-2047 27
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
TT
Client Server
X
SYN
SYN-ACK
ACK 6
Request 1
ACK
DATA 4
DATA 3
DATA 5
DATA 3
Request 1 (Cont)
X
DATA 4
DATA 1
Request 2
DATA 6
DATA 2
ACK 3
ACK
SND
CND
Understand IOS ART Metrics Calculation
Request
Response
Retransmission
RT Response Time
(RT)
t(First response pkt)
– t(Last request pkt)
Transaction
Time (TT)
t(Last response pkt)
– t(First request pkt)
Network Delay
(ND)
ND = CND + SND
Application
Delay (AD)
AD = RT – SND
Quantify User
Experience
Identify Server
Performance Issue
ART
DEVNET-2047 28
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
flow record RECORD-FNF
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
match flow direction
collect interface output
collect counter bytes long
collect counter packets
flow record type performance-monitor my-rec
match routing vrf input
match ipv4 protocol
match application name account-on-resolution
match connection client ipv4 address
match connection server ipv4 address
match connection server transport port
collect connection new-connections
collect connection sum-duration
collect connection server counter bytes long
collect connection server counter packets long
collect connection client counter bytes long
collect connection client counter packets long
flow record type performance-monitor my-rec
match routing vrf input
match ipv4 protocol
match application name
match connection client ipv4 address
match connection server ipv4 address
match connection server transport port
collect ipv4 dscp
collect connection delay response to-server sum
collect connection server counter responses
collect connection delay network to-server sum
collect connection delay network to-client sum
flow record type performance-monitor pm-ipv4
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match ipv4 protocol
match transport rtp ssrc
collect transport packets lost counter
collect transport packets lost rate
collect transport rtp jitter mean
collect transport rtp jitter minimum
collect transport rtp jitter maximum
collect application media packets rate
Flexible Netflow – Unified Monitoring
Common CLI and Framework to Export Various Metrics
Netflow Conversation Stats
Perf-Mon
ART
Define Flow Exporter - where to send
Apply Flow monitor to Interface, Direction
Define Flow Record - Match & Collect
Common Flexible Netflow Based MonitoringUnified Monitoring with Metric Mediation Agent (MMA) is available since 15.4(1)T
Customer are advised to migrate from MACE to MMA
ezPM Profiles
Template based configuration
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
eZPM Profile
Predefined profilesfor monitoring
• Enable ez-PM CLI to get visibility + monitoring
stats reported via netflow to prime
• Configures exporters
• Enable / Disables various traffic-monitors (a.k.a
tools)
• For each traffic-monitor, overrides some default
parameters (IPv4/6, Ingress/Egress, traffic to
which the monitor is applied, cache size..)
• Equivalent ~650 lines of configuration
Monitor Name Default Traffic Classification
Application-
Response-Time
(ART)
All TCP
URL HTTP applications
Media RTP applications over UDP
Conversation-
Traffic-Stats
Remaining traffic not matching other
classifications
DEVNET-2047 31
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Types of ezPM Profiles
• application-stats
• application-client-server-stats
• application-response-time
• url
• media
• application-traffic-stats
• conversion-traffic-stats
• application-response-time
• url
• media
• application-stats
• application-client-server-stats
•Addresses most common deployments
(capacity planning) with more details
than application-stats profile
•Aggregated App level stat (examples -
“Top N Apps, BW per App, Top
clients/servers per App”
•Additional metrics, granularity
• Selectively enable “fine grain” only
for critical apps (and not all traffic).
• Performance metrics
• Very detailed
• Addresses most common
deployments (capacity planning)
• Aggregated App level stat (examples
- “Top N Apps, BW per App, Top
clients/servers per App”
• Per interface/Application statistics
• Per client/server/application/interface
statistics
Application Stats Application Performance Application Experience
DEVNET-2047 32
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
ezPM Profile
! User defined ezPM context
performance monitor context MYTEST profile application-statistics
exporter destination 10.10.10.10 source GigabitEthernet0/0/1
traffic-monitor application-stats
traffic-monitor application-client-server-stats
!
! Attach the context to the interface
interface GigabitEthernet0/0/2
performance monitor context MYTEST
!
! User defined ezPM context
performance monitor context MYTEST profile application-performance
traffic-monitor url
traffic-monitor application-client-server-stats
traffic-monitor application-stats
traffic-monitor application-response-time
traffic-monitor media
!
! Attach the context to the interface
interface Ethernet0/0
performance monitor context MYTEST
!
! User defined ezPM context
performance monitor context MYTEST profile application-experience
traffic-monitor url
traffic-monitor application-traffic-stats
traffic-monitor conversation-traffic-stats
traffic-monitor application-response-time
!
! Attach the context to the interface
interface Ethernet0/0
performance monitor context MYTEST
DEVNET-2047 33
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Opportunities for Follow-up
Become a DevNet Community member:
www.developer.cisco.com
AVC DevNet Page:
https://developer.cisco.com/site/app-vis-control/overview/
DEVNET-2047 34
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Continue Your Education in the DevNet Zone
• Take the DevNet Workshop
• DEVNET-2048: Application Visibility and Experience through Flexible Netflow Workshop
• Meet the Experts at the Demo Pods
DEVNET-2047 35
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Complete Your Online Session Evaluation
Don’t forget: Cisco Live sessions will be available
for viewing on-demand after the event at
CiscoLive.com/Online
• Give us your feedback to be
entered into a Daily Survey
Drawing. A daily winner will
receive a $750 Amazon gift card.
• Complete your session surveys
through the Cisco Live mobile
app or from the Session Catalog
on CiscoLive.com/us.
DEVNET-2047 36
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Continue Your Education
• Demos in the Cisco campus
• Walk-in Self-Paced Labs
• Lunch & Learn
• Meet the Engineer 1:1 meetings
• Related sessions
DEVNET-2047 37
Please join us for the Service Provider Innovation Talk featuring:
Yvette Kanouff | Senior Vice President and General Manager, SP Business
Joe Cozzolino | Senior Vice President, Cisco Services
Thursday, July 14th, 2016
11:30 am - 12:30 pm, In the Oceanside A room
What to expect from this innovation talk
• Insights on market trends and forecasts
• Preview of key technologies and capabilities
• Innovative demonstrations of the latest and greatest products
• Better understanding of how Cisco can help you succeed
Register to attend the session live now or
watch the broadcast on cisco.com
Thank you
Application Visibility and Experience through Flexible Netflow

Contenu connexe

Tendances

Device Programmability with Cisco Plug-n-Play Solution
Device Programmability with Cisco Plug-n-Play SolutionDevice Programmability with Cisco Plug-n-Play Solution
Device Programmability with Cisco Plug-n-Play SolutionCisco DevNet
 
Cisco Connect Toronto 2017 - Cloud and On Premises Collaboration Security Exp...
Cisco Connect Toronto 2017 - Cloud and On Premises Collaboration Security Exp...Cisco Connect Toronto 2017 - Cloud and On Premises Collaboration Security Exp...
Cisco Connect Toronto 2017 - Cloud and On Premises Collaboration Security Exp...Cisco Canada
 
Network Security and Visibility through NetFlow
Network Security and Visibility through NetFlowNetwork Security and Visibility through NetFlow
Network Security and Visibility through NetFlowLancope, Inc.
 
Open Device Programmability: Hands-on Intro to RESTCONF (and a bit of NETCONF)
Open Device Programmability: Hands-on Intro to RESTCONF (and a bit of NETCONF)Open Device Programmability: Hands-on Intro to RESTCONF (and a bit of NETCONF)
Open Device Programmability: Hands-on Intro to RESTCONF (and a bit of NETCONF)Cisco DevNet
 
Putting Firepower Into The Next Generation Firewall
Putting Firepower Into The Next Generation FirewallPutting Firepower Into The Next Generation Firewall
Putting Firepower Into The Next Generation FirewallCisco Canada
 
PLNOG 9: Robert Dąbrowski - Carrier-grade NAT (CGN) Solution with FortiGate
PLNOG 9: Robert Dąbrowski - Carrier-grade NAT (CGN) Solution with FortiGatePLNOG 9: Robert Dąbrowski - Carrier-grade NAT (CGN) Solution with FortiGate
PLNOG 9: Robert Dąbrowski - Carrier-grade NAT (CGN) Solution with FortiGatePROIDEA
 
Media Handling in FreeSWITCH
Media Handling in FreeSWITCHMedia Handling in FreeSWITCH
Media Handling in FreeSWITCHMoises Silva
 
APAC Webinar: Learn how to maximise the benefits of NFV
APAC Webinar: Learn how to maximise the benefits of NFVAPAC Webinar: Learn how to maximise the benefits of NFV
APAC Webinar: Learn how to maximise the benefits of NFVF5NetworksAPJ
 
Cisco Connect Toronto 2017 - Introducing the Network Intuitive
Cisco Connect Toronto 2017 - Introducing the Network IntuitiveCisco Connect Toronto 2017 - Introducing the Network Intuitive
Cisco Connect Toronto 2017 - Introducing the Network IntuitiveCisco Canada
 
Chapter 8 overview
Chapter 8 overviewChapter 8 overview
Chapter 8 overviewali raza
 
Cisco Intelligent Branch - Enabling the Next Generation Branch
Cisco Intelligent Branch - Enabling the Next Generation BranchCisco Intelligent Branch - Enabling the Next Generation Branch
Cisco Intelligent Branch - Enabling the Next Generation BranchCisco Canada
 
Integration and Interoperation of existing Nexus networks into an ACI Archite...
Integration and Interoperation of existing Nexus networks into an ACI Archite...Integration and Interoperation of existing Nexus networks into an ACI Archite...
Integration and Interoperation of existing Nexus networks into an ACI Archite...Cisco Canada
 
F5 EMEA Webinar Oct'15: http2 how to ease the transition
F5 EMEA Webinar Oct'15: http2 how to ease the transitionF5 EMEA Webinar Oct'15: http2 how to ease the transition
F5 EMEA Webinar Oct'15: http2 how to ease the transitionDmitry Tikhovich
 
NetFlow Best Practices - Tips and Tricks to Get the Most Out of Your Network ...
NetFlow Best Practices - Tips and Tricks to Get the Most Out of Your Network ...NetFlow Best Practices - Tips and Tricks to Get the Most Out of Your Network ...
NetFlow Best Practices - Tips and Tricks to Get the Most Out of Your Network ...SolarWinds
 
CCIE Service Provider
CCIE Service ProviderCCIE Service Provider
CCIE Service ProviderCisco Canada
 
Cisco DC Networking: Gain Insight and Programmability with
Cisco DC Networking: Gain Insight and Programmability with Cisco DC Networking: Gain Insight and Programmability with
Cisco DC Networking: Gain Insight and Programmability with Cisco Canada
 
TechWiseTV Workshop: Nexus Data Broker
TechWiseTV Workshop: Nexus Data BrokerTechWiseTV Workshop: Nexus Data Broker
TechWiseTV Workshop: Nexus Data BrokerRobb Boyd
 

Tendances (20)

Stun turn poc_pilot
Stun turn poc_pilotStun turn poc_pilot
Stun turn poc_pilot
 
Device Programmability with Cisco Plug-n-Play Solution
Device Programmability with Cisco Plug-n-Play SolutionDevice Programmability with Cisco Plug-n-Play Solution
Device Programmability with Cisco Plug-n-Play Solution
 
Cisco Connect Toronto 2017 - Cloud and On Premises Collaboration Security Exp...
Cisco Connect Toronto 2017 - Cloud and On Premises Collaboration Security Exp...Cisco Connect Toronto 2017 - Cloud and On Premises Collaboration Security Exp...
Cisco Connect Toronto 2017 - Cloud and On Premises Collaboration Security Exp...
 
Network Security and Visibility through NetFlow
Network Security and Visibility through NetFlowNetwork Security and Visibility through NetFlow
Network Security and Visibility through NetFlow
 
Open Device Programmability: Hands-on Intro to RESTCONF (and a bit of NETCONF)
Open Device Programmability: Hands-on Intro to RESTCONF (and a bit of NETCONF)Open Device Programmability: Hands-on Intro to RESTCONF (and a bit of NETCONF)
Open Device Programmability: Hands-on Intro to RESTCONF (and a bit of NETCONF)
 
Putting Firepower Into The Next Generation Firewall
Putting Firepower Into The Next Generation FirewallPutting Firepower Into The Next Generation Firewall
Putting Firepower Into The Next Generation Firewall
 
PLNOG 9: Robert Dąbrowski - Carrier-grade NAT (CGN) Solution with FortiGate
PLNOG 9: Robert Dąbrowski - Carrier-grade NAT (CGN) Solution with FortiGatePLNOG 9: Robert Dąbrowski - Carrier-grade NAT (CGN) Solution with FortiGate
PLNOG 9: Robert Dąbrowski - Carrier-grade NAT (CGN) Solution with FortiGate
 
Media Handling in FreeSWITCH
Media Handling in FreeSWITCHMedia Handling in FreeSWITCH
Media Handling in FreeSWITCH
 
APAC Webinar: Learn how to maximise the benefits of NFV
APAC Webinar: Learn how to maximise the benefits of NFVAPAC Webinar: Learn how to maximise the benefits of NFV
APAC Webinar: Learn how to maximise the benefits of NFV
 
Cisco Connect Toronto 2017 - Introducing the Network Intuitive
Cisco Connect Toronto 2017 - Introducing the Network IntuitiveCisco Connect Toronto 2017 - Introducing the Network Intuitive
Cisco Connect Toronto 2017 - Introducing the Network Intuitive
 
Chapter 8 overview
Chapter 8 overviewChapter 8 overview
Chapter 8 overview
 
Cisco Intelligent Branch - Enabling the Next Generation Branch
Cisco Intelligent Branch - Enabling the Next Generation BranchCisco Intelligent Branch - Enabling the Next Generation Branch
Cisco Intelligent Branch - Enabling the Next Generation Branch
 
ACI Hands-on Lab
ACI Hands-on LabACI Hands-on Lab
ACI Hands-on Lab
 
Integration and Interoperation of existing Nexus networks into an ACI Archite...
Integration and Interoperation of existing Nexus networks into an ACI Archite...Integration and Interoperation of existing Nexus networks into an ACI Archite...
Integration and Interoperation of existing Nexus networks into an ACI Archite...
 
F5 EMEA Webinar Oct'15: http2 how to ease the transition
F5 EMEA Webinar Oct'15: http2 how to ease the transitionF5 EMEA Webinar Oct'15: http2 how to ease the transition
F5 EMEA Webinar Oct'15: http2 how to ease the transition
 
NetFlow Best Practices - Tips and Tricks to Get the Most Out of Your Network ...
NetFlow Best Practices - Tips and Tricks to Get the Most Out of Your Network ...NetFlow Best Practices - Tips and Tricks to Get the Most Out of Your Network ...
NetFlow Best Practices - Tips and Tricks to Get the Most Out of Your Network ...
 
CCIE Service Provider
CCIE Service ProviderCCIE Service Provider
CCIE Service Provider
 
Cisco DC Networking: Gain Insight and Programmability with
Cisco DC Networking: Gain Insight and Programmability with Cisco DC Networking: Gain Insight and Programmability with
Cisco DC Networking: Gain Insight and Programmability with
 
Netflow slides
Netflow slidesNetflow slides
Netflow slides
 
TechWiseTV Workshop: Nexus Data Broker
TechWiseTV Workshop: Nexus Data BrokerTechWiseTV Workshop: Nexus Data Broker
TechWiseTV Workshop: Nexus Data Broker
 

Similaire à Application Visibility and Experience through Flexible Netflow

NetFlow Monitoring for Cyber Threat Defense
NetFlow Monitoring for Cyber Threat DefenseNetFlow Monitoring for Cyber Threat Defense
NetFlow Monitoring for Cyber Threat DefenseCisco Canada
 
F5 Solutions for Service Providers
F5 Solutions for Service ProvidersF5 Solutions for Service Providers
F5 Solutions for Service ProvidersBAKOTECH
 
Sinnreich Henry Johnston Alan Pt 2
Sinnreich Henry Johnston Alan   Pt 2Sinnreich Henry Johnston Alan   Pt 2
Sinnreich Henry Johnston Alan Pt 2Carl Ford
 
Manageengine Netflow analyzer - An Insight
Manageengine Netflow analyzer - An InsightManageengine Netflow analyzer - An Insight
Manageengine Netflow analyzer - An InsightSai Sundhar Padmanabhan
 
Introducing Application Engineered Routing Powered by Segment Routing
Introducing Application Engineered Routing Powered by Segment RoutingIntroducing Application Engineered Routing Powered by Segment Routing
Introducing Application Engineered Routing Powered by Segment RoutingCisco Service Provider
 
Summit 16: Open-O Mini-Summit - VF Event Streaming Project Proposal
Summit 16: Open-O Mini-Summit - VF Event Streaming Project ProposalSummit 16: Open-O Mini-Summit - VF Event Streaming Project Proposal
Summit 16: Open-O Mini-Summit - VF Event Streaming Project ProposalOPNFV
 
Krzysztof Mazepa - Netflow/cflow - ulubionym narzędziem operatorów SP
Krzysztof Mazepa - Netflow/cflow - ulubionym narzędziem operatorów SPKrzysztof Mazepa - Netflow/cflow - ulubionym narzędziem operatorów SP
Krzysztof Mazepa - Netflow/cflow - ulubionym narzędziem operatorów SPPROIDEA
 
PLNOG14: Service orchestration in provider network, Tail-f - Przemysław Borek
PLNOG14: Service orchestration in provider network, Tail-f - Przemysław BorekPLNOG14: Service orchestration in provider network, Tail-f - Przemysław Borek
PLNOG14: Service orchestration in provider network, Tail-f - Przemysław BorekPROIDEA
 
The Data Center Network Evolution
The Data Center Network EvolutionThe Data Center Network Evolution
The Data Center Network EvolutionCisco Canada
 
Enabling Multi-access Edge Computing (MEC) Platform-as-a-Service for Enterprises
Enabling Multi-access Edge Computing (MEC) Platform-as-a-Service for EnterprisesEnabling Multi-access Edge Computing (MEC) Platform-as-a-Service for Enterprises
Enabling Multi-access Edge Computing (MEC) Platform-as-a-Service for EnterprisesMichelle Holley
 
CCNA v6.0 ITN - Chapter 09
CCNA v6.0 ITN - Chapter 09CCNA v6.0 ITN - Chapter 09
CCNA v6.0 ITN - Chapter 09Irsandi Hasan
 
Design and Deployment of Enterprise WLANs
Design and Deployment of Enterprise WLANsDesign and Deployment of Enterprise WLANs
Design and Deployment of Enterprise WLANsFab Fusaro
 
Leveraging Network Offload to Accelerate SDN and NFV Deployments
Leveraging Network Offload to Accelerate SDN and NFV DeploymentsLeveraging Network Offload to Accelerate SDN and NFV Deployments
Leveraging Network Offload to Accelerate SDN and NFV DeploymentsNetronome
 
PLNOG 13: Krzysztof Mazepa: BGP FlowSpec
PLNOG 13: Krzysztof Mazepa: BGP FlowSpecPLNOG 13: Krzysztof Mazepa: BGP FlowSpec
PLNOG 13: Krzysztof Mazepa: BGP FlowSpecPROIDEA
 
Brocade Administration & troubleshooting
Brocade Administration & troubleshootingBrocade Administration & troubleshooting
Brocade Administration & troubleshootingprakashjjaya
 
Обеспечение безопасности сети оператора связи с помощью BGP FlowSpec
Обеспечение безопасности сети оператора связи с помощью BGP FlowSpecОбеспечение безопасности сети оператора связи с помощью BGP FlowSpec
Обеспечение безопасности сети оператора связи с помощью BGP FlowSpecCisco Russia
 
Designing an 4K/UHD1 HDR OB Truck as 12G-SDI or IP-based
Designing an 4K/UHD1 HDR OB Truck as 12G-SDI or IP-basedDesigning an 4K/UHD1 HDR OB Truck as 12G-SDI or IP-based
Designing an 4K/UHD1 HDR OB Truck as 12G-SDI or IP-basedDr. Mohieddin Moradi
 
IRATI: an open source RINA implementation for Linux/OS
IRATI: an open source RINA implementation for Linux/OSIRATI: an open source RINA implementation for Linux/OS
IRATI: an open source RINA implementation for Linux/OSICT PRISTINE
 

Similaire à Application Visibility and Experience through Flexible Netflow (20)

NFA - Middle East Workshop
NFA - Middle East WorkshopNFA - Middle East Workshop
NFA - Middle East Workshop
 
Vo ip sip
Vo ip sipVo ip sip
Vo ip sip
 
NetFlow Monitoring for Cyber Threat Defense
NetFlow Monitoring for Cyber Threat DefenseNetFlow Monitoring for Cyber Threat Defense
NetFlow Monitoring for Cyber Threat Defense
 
F5 Solutions for Service Providers
F5 Solutions for Service ProvidersF5 Solutions for Service Providers
F5 Solutions for Service Providers
 
Sinnreich Henry Johnston Alan Pt 2
Sinnreich Henry Johnston Alan   Pt 2Sinnreich Henry Johnston Alan   Pt 2
Sinnreich Henry Johnston Alan Pt 2
 
Manageengine Netflow analyzer - An Insight
Manageengine Netflow analyzer - An InsightManageengine Netflow analyzer - An Insight
Manageengine Netflow analyzer - An Insight
 
Introducing Application Engineered Routing Powered by Segment Routing
Introducing Application Engineered Routing Powered by Segment RoutingIntroducing Application Engineered Routing Powered by Segment Routing
Introducing Application Engineered Routing Powered by Segment Routing
 
Summit 16: Open-O Mini-Summit - VF Event Streaming Project Proposal
Summit 16: Open-O Mini-Summit - VF Event Streaming Project ProposalSummit 16: Open-O Mini-Summit - VF Event Streaming Project Proposal
Summit 16: Open-O Mini-Summit - VF Event Streaming Project Proposal
 
Krzysztof Mazepa - Netflow/cflow - ulubionym narzędziem operatorów SP
Krzysztof Mazepa - Netflow/cflow - ulubionym narzędziem operatorów SPKrzysztof Mazepa - Netflow/cflow - ulubionym narzędziem operatorów SP
Krzysztof Mazepa - Netflow/cflow - ulubionym narzędziem operatorów SP
 
PLNOG14: Service orchestration in provider network, Tail-f - Przemysław Borek
PLNOG14: Service orchestration in provider network, Tail-f - Przemysław BorekPLNOG14: Service orchestration in provider network, Tail-f - Przemysław Borek
PLNOG14: Service orchestration in provider network, Tail-f - Przemysław Borek
 
The Data Center Network Evolution
The Data Center Network EvolutionThe Data Center Network Evolution
The Data Center Network Evolution
 
Enabling Multi-access Edge Computing (MEC) Platform-as-a-Service for Enterprises
Enabling Multi-access Edge Computing (MEC) Platform-as-a-Service for EnterprisesEnabling Multi-access Edge Computing (MEC) Platform-as-a-Service for Enterprises
Enabling Multi-access Edge Computing (MEC) Platform-as-a-Service for Enterprises
 
CCNA v6.0 ITN - Chapter 09
CCNA v6.0 ITN - Chapter 09CCNA v6.0 ITN - Chapter 09
CCNA v6.0 ITN - Chapter 09
 
Design and Deployment of Enterprise WLANs
Design and Deployment of Enterprise WLANsDesign and Deployment of Enterprise WLANs
Design and Deployment of Enterprise WLANs
 
Leveraging Network Offload to Accelerate SDN and NFV Deployments
Leveraging Network Offload to Accelerate SDN and NFV DeploymentsLeveraging Network Offload to Accelerate SDN and NFV Deployments
Leveraging Network Offload to Accelerate SDN and NFV Deployments
 
PLNOG 13: Krzysztof Mazepa: BGP FlowSpec
PLNOG 13: Krzysztof Mazepa: BGP FlowSpecPLNOG 13: Krzysztof Mazepa: BGP FlowSpec
PLNOG 13: Krzysztof Mazepa: BGP FlowSpec
 
Brocade Administration & troubleshooting
Brocade Administration & troubleshootingBrocade Administration & troubleshooting
Brocade Administration & troubleshooting
 
Обеспечение безопасности сети оператора связи с помощью BGP FlowSpec
Обеспечение безопасности сети оператора связи с помощью BGP FlowSpecОбеспечение безопасности сети оператора связи с помощью BGP FlowSpec
Обеспечение безопасности сети оператора связи с помощью BGP FlowSpec
 
Designing an 4K/UHD1 HDR OB Truck as 12G-SDI or IP-based
Designing an 4K/UHD1 HDR OB Truck as 12G-SDI or IP-basedDesigning an 4K/UHD1 HDR OB Truck as 12G-SDI or IP-based
Designing an 4K/UHD1 HDR OB Truck as 12G-SDI or IP-based
 
IRATI: an open source RINA implementation for Linux/OS
IRATI: an open source RINA implementation for Linux/OSIRATI: an open source RINA implementation for Linux/OS
IRATI: an open source RINA implementation for Linux/OS
 

Plus de Cisco DevNet

How to Contribute to Ansible
How to Contribute to AnsibleHow to Contribute to Ansible
How to Contribute to AnsibleCisco DevNet
 
Rome 2017: Building advanced voice assistants and chat bots
Rome 2017: Building advanced voice assistants and chat botsRome 2017: Building advanced voice assistants and chat bots
Rome 2017: Building advanced voice assistants and chat botsCisco DevNet
 
How to Build Advanced Voice Assistants and Chatbots
How to Build Advanced Voice Assistants and ChatbotsHow to Build Advanced Voice Assistants and Chatbots
How to Build Advanced Voice Assistants and ChatbotsCisco DevNet
 
Cisco Spark and Tropo and the Programmable Web
Cisco Spark and Tropo and the Programmable WebCisco Spark and Tropo and the Programmable Web
Cisco Spark and Tropo and the Programmable WebCisco DevNet
 
Building a WiFi Hotspot with NodeJS: Cisco Meraki - ExCap API
Building a WiFi Hotspot with NodeJS: Cisco Meraki - ExCap APIBuilding a WiFi Hotspot with NodeJS: Cisco Meraki - ExCap API
Building a WiFi Hotspot with NodeJS: Cisco Meraki - ExCap APICisco DevNet
 
WAN Automation Engine API Deep Dive
WAN Automation Engine API Deep DiveWAN Automation Engine API Deep Dive
WAN Automation Engine API Deep DiveCisco DevNet
 
Cisco's Open Device Programmability Strategy: Open Discussion
Cisco's Open Device Programmability Strategy: Open DiscussionCisco's Open Device Programmability Strategy: Open Discussion
Cisco's Open Device Programmability Strategy: Open DiscussionCisco DevNet
 
NETCONF & YANG Enablement of Network Devices
NETCONF & YANG Enablement of Network DevicesNETCONF & YANG Enablement of Network Devices
NETCONF & YANG Enablement of Network DevicesCisco DevNet
 
UCS Management APIs A Technical Deep Dive
UCS Management APIs A Technical Deep DiveUCS Management APIs A Technical Deep Dive
UCS Management APIs A Technical Deep DiveCisco DevNet
 
OpenStack Enabling DevOps
OpenStack Enabling DevOpsOpenStack Enabling DevOps
OpenStack Enabling DevOpsCisco DevNet
 
NetDevOps for the Network Dude: How to get started with API's, Ansible and Py...
NetDevOps for the Network Dude: How to get started with API's, Ansible and Py...NetDevOps for the Network Dude: How to get started with API's, Ansible and Py...
NetDevOps for the Network Dude: How to get started with API's, Ansible and Py...Cisco DevNet
 
Getting Started: Developing Tropo Applications
Getting Started: Developing Tropo ApplicationsGetting Started: Developing Tropo Applications
Getting Started: Developing Tropo ApplicationsCisco DevNet
 
Cisco Spark & Tropo API Workshop
Cisco Spark & Tropo API WorkshopCisco Spark & Tropo API Workshop
Cisco Spark & Tropo API WorkshopCisco DevNet
 
Coding 102 REST API Basics Using Spark
Coding 102 REST API Basics Using SparkCoding 102 REST API Basics Using Spark
Coding 102 REST API Basics Using SparkCisco DevNet
 
Cisco APIs: An Interactive Assistant for the Web2Day Developer Conference
Cisco APIs: An Interactive Assistant for the Web2Day Developer ConferenceCisco APIs: An Interactive Assistant for the Web2Day Developer Conference
Cisco APIs: An Interactive Assistant for the Web2Day Developer ConferenceCisco DevNet
 
DevNet Express - Spark & Tropo API - Lisbon May 2016
DevNet Express - Spark & Tropo API - Lisbon May 2016DevNet Express - Spark & Tropo API - Lisbon May 2016
DevNet Express - Spark & Tropo API - Lisbon May 2016Cisco DevNet
 
DevNet @TAG - Spark & Tropo APIs - Milan/Rome May 2016
DevNet @TAG - Spark & Tropo APIs - Milan/Rome May 2016DevNet @TAG - Spark & Tropo APIs - Milan/Rome May 2016
DevNet @TAG - Spark & Tropo APIs - Milan/Rome May 2016Cisco DevNet
 
Choosing PaaS: Cisco and Open Source Options: an overview
Choosing PaaS:  Cisco and Open Source Options: an overviewChoosing PaaS:  Cisco and Open Source Options: an overview
Choosing PaaS: Cisco and Open Source Options: an overviewCisco DevNet
 
Doing Business with Tropo
Doing Business with TropoDoing Business with Tropo
Doing Business with TropoCisco DevNet
 
Introduction to the DevNet Sandbox and IVT
Introduction to the DevNet Sandbox and IVTIntroduction to the DevNet Sandbox and IVT
Introduction to the DevNet Sandbox and IVTCisco DevNet
 

Plus de Cisco DevNet (20)

How to Contribute to Ansible
How to Contribute to AnsibleHow to Contribute to Ansible
How to Contribute to Ansible
 
Rome 2017: Building advanced voice assistants and chat bots
Rome 2017: Building advanced voice assistants and chat botsRome 2017: Building advanced voice assistants and chat bots
Rome 2017: Building advanced voice assistants and chat bots
 
How to Build Advanced Voice Assistants and Chatbots
How to Build Advanced Voice Assistants and ChatbotsHow to Build Advanced Voice Assistants and Chatbots
How to Build Advanced Voice Assistants and Chatbots
 
Cisco Spark and Tropo and the Programmable Web
Cisco Spark and Tropo and the Programmable WebCisco Spark and Tropo and the Programmable Web
Cisco Spark and Tropo and the Programmable Web
 
Building a WiFi Hotspot with NodeJS: Cisco Meraki - ExCap API
Building a WiFi Hotspot with NodeJS: Cisco Meraki - ExCap APIBuilding a WiFi Hotspot with NodeJS: Cisco Meraki - ExCap API
Building a WiFi Hotspot with NodeJS: Cisco Meraki - ExCap API
 
WAN Automation Engine API Deep Dive
WAN Automation Engine API Deep DiveWAN Automation Engine API Deep Dive
WAN Automation Engine API Deep Dive
 
Cisco's Open Device Programmability Strategy: Open Discussion
Cisco's Open Device Programmability Strategy: Open DiscussionCisco's Open Device Programmability Strategy: Open Discussion
Cisco's Open Device Programmability Strategy: Open Discussion
 
NETCONF & YANG Enablement of Network Devices
NETCONF & YANG Enablement of Network DevicesNETCONF & YANG Enablement of Network Devices
NETCONF & YANG Enablement of Network Devices
 
UCS Management APIs A Technical Deep Dive
UCS Management APIs A Technical Deep DiveUCS Management APIs A Technical Deep Dive
UCS Management APIs A Technical Deep Dive
 
OpenStack Enabling DevOps
OpenStack Enabling DevOpsOpenStack Enabling DevOps
OpenStack Enabling DevOps
 
NetDevOps for the Network Dude: How to get started with API's, Ansible and Py...
NetDevOps for the Network Dude: How to get started with API's, Ansible and Py...NetDevOps for the Network Dude: How to get started with API's, Ansible and Py...
NetDevOps for the Network Dude: How to get started with API's, Ansible and Py...
 
Getting Started: Developing Tropo Applications
Getting Started: Developing Tropo ApplicationsGetting Started: Developing Tropo Applications
Getting Started: Developing Tropo Applications
 
Cisco Spark & Tropo API Workshop
Cisco Spark & Tropo API WorkshopCisco Spark & Tropo API Workshop
Cisco Spark & Tropo API Workshop
 
Coding 102 REST API Basics Using Spark
Coding 102 REST API Basics Using SparkCoding 102 REST API Basics Using Spark
Coding 102 REST API Basics Using Spark
 
Cisco APIs: An Interactive Assistant for the Web2Day Developer Conference
Cisco APIs: An Interactive Assistant for the Web2Day Developer ConferenceCisco APIs: An Interactive Assistant for the Web2Day Developer Conference
Cisco APIs: An Interactive Assistant for the Web2Day Developer Conference
 
DevNet Express - Spark & Tropo API - Lisbon May 2016
DevNet Express - Spark & Tropo API - Lisbon May 2016DevNet Express - Spark & Tropo API - Lisbon May 2016
DevNet Express - Spark & Tropo API - Lisbon May 2016
 
DevNet @TAG - Spark & Tropo APIs - Milan/Rome May 2016
DevNet @TAG - Spark & Tropo APIs - Milan/Rome May 2016DevNet @TAG - Spark & Tropo APIs - Milan/Rome May 2016
DevNet @TAG - Spark & Tropo APIs - Milan/Rome May 2016
 
Choosing PaaS: Cisco and Open Source Options: an overview
Choosing PaaS:  Cisco and Open Source Options: an overviewChoosing PaaS:  Cisco and Open Source Options: an overview
Choosing PaaS: Cisco and Open Source Options: an overview
 
Doing Business with Tropo
Doing Business with TropoDoing Business with Tropo
Doing Business with Tropo
 
Introduction to the DevNet Sandbox and IVT
Introduction to the DevNet Sandbox and IVTIntroduction to the DevNet Sandbox and IVT
Introduction to the DevNet Sandbox and IVT
 

Dernier

How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerThousandEyes
 
IAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI SolutionsIAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI SolutionsEnterprise Knowledge
 
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time AutomationFrom Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time AutomationSafe Software
 
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptxEIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptxEarley Information Science
 
Boost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfBoost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfsudhanshuwaghmare1
 
Evaluating the top large language models.pdf
Evaluating the top large language models.pdfEvaluating the top large language models.pdf
Evaluating the top large language models.pdfChristopherTHyatt
 
How to convert PDF to text with Nanonets
How to convert PDF to text with NanonetsHow to convert PDF to text with Nanonets
How to convert PDF to text with Nanonetsnaman860154
 
Histor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slideHistor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slidevu2urc
 
08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking MenDelhi Call girls
 
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUK Journal
 
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProduct Anonymous
 
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...Neo4j
 
Handwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsHandwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsMaria Levchenko
 
08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking Men08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking MenDelhi Call girls
 
A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)Gabriella Davis
 
CNv6 Instructor Chapter 6 Quality of Service
CNv6 Instructor Chapter 6 Quality of ServiceCNv6 Instructor Chapter 6 Quality of Service
CNv6 Instructor Chapter 6 Quality of Servicegiselly40
 
🐬 The future of MySQL is Postgres 🐘
🐬  The future of MySQL is Postgres   🐘🐬  The future of MySQL is Postgres   🐘
🐬 The future of MySQL is Postgres 🐘RTylerCroy
 
What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?Antenna Manufacturer Coco
 
2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...Martijn de Jong
 

Dernier (20)

How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
IAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI SolutionsIAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI Solutions
 
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time AutomationFrom Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
 
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptxEIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
 
Boost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfBoost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdf
 
Evaluating the top large language models.pdf
Evaluating the top large language models.pdfEvaluating the top large language models.pdf
Evaluating the top large language models.pdf
 
How to convert PDF to text with Nanonets
How to convert PDF to text with NanonetsHow to convert PDF to text with Nanonets
How to convert PDF to text with Nanonets
 
Histor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slideHistor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slide
 
08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men
 
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
 
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
 
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
 
Handwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsHandwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed texts
 
08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking Men08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking Men
 
A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)
 
CNv6 Instructor Chapter 6 Quality of Service
CNv6 Instructor Chapter 6 Quality of ServiceCNv6 Instructor Chapter 6 Quality of Service
CNv6 Instructor Chapter 6 Quality of Service
 
🐬 The future of MySQL is Postgres 🐘
🐬  The future of MySQL is Postgres   🐘🐬  The future of MySQL is Postgres   🐘
🐬 The future of MySQL is Postgres 🐘
 
What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?
 
2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...
 

Application Visibility and Experience through Flexible Netflow

  • 1. Application Visibility and Experience through Flexible Netflow Murali Erraguntala, Product Manager (merragun, @muralie) Gurudutt Pai, Technical Marketing Engineer (gupai, @gurudatt28227) DEVNET-2047 https://cisco.box.com/v/CLUS-FNF
  • 2. • Application Visibility and Control – Overview • AVC Building Blocks (NBAR, Custom Application, PerfMon, FNF etc) • Application Recognition • Objective of AVC • Application Visibility and Monitoring (Partners Role) • Flexible Netflow – Traffic Statistics, Unified Monitoring, Granular Monitoring – URL Statistics • Monitoring Applications including Voice and Video • eZPM Profiles Agenda WHAT is AVC and WHY AVC is Required? HOW Partners can add VALUE?
  • 3. What is AVC Enabling Application Aware Networks
  • 4. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public Cross Vertical Ecosystem Partners Application Visibility and Control - Overview Ubiquity Service Integration Application Richness Analytics Billing Security 1400 + Application DEVNET-2047 4
  • 5. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public End to End AVC Support Matrix Visibility Monitoring Control Limited Wireless (WLC, AP) Distribution, Core WAN Edge Internet Edge Data Center Wired Access Firewall & Security NA Roadmap For Your Reference DEVNET-2047 5
  • 6. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public AVC Building Blocks NBAR2 Protocol Pack Custom Signature URL Port IP Address SSL PPDK Flexible NetFlow PerfMon Application Recognition Reporting of Usage (BW, Top Users, Perf Metrics) Troubleshoot applications. Business policy driven routing Delivers Across
  • 7. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public Application Awareness Application Analytics Application Control Application Experience Deliver Best Application Experience By Optimizing Utilization of Customer Networks Through Simple, yet Powerful Ways of And Minimizing IT Cost On Device Partner Products Mandatory (FNF) Optional (APIs) Optional (FNF)
  • 9. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public • NetFlow is the de-facto mechanism to provide visibility on network utilization • Collect and export network information and usage statistics and performance data • Backward compatible with TNF records • Flexibility in defining fields and flow record format • Utilize Netflow Version 9 format which is extensible • FNF supports IPFIX • Consist of data collection (flow monitor) and data export (flow export) • Open-standard, can be analyzed by Cisco Prime NAM, Cisco Prime Assurance Manager, and 3rd Party Tools Usage of FNF • Analytics • Capacity Planning • Performance Monitoring • Application Troubleshooting • Billing • Security • Peering Traffic Monitoring • MSP: Multi-Tenant Reports Flexible Netflow (FNF) App discovery (w/ NBAR2) and Bandwidth Usage Report DEVNET-2047 9
  • 10. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public Key Fields Packet #1 Source IP 10.1.1.1 Destination IP 173.194.34.134 Source Port 20457 Destination Port 23 Layer 3 protocol 6 TOS byte 0 Ingres Interface Ethernet 0 Src. IP Dest. IP Src. Port Dest. Port Layer 3 Prot. TOS Byte Ingress Intf. 10.1.1.1 173.194.34.134. 20457 80 6 0 Ethernet 0 Key Fields Packet #2 Source IP 10.1.1.1 Destination IP 72.163.4.161 Source Port 30307 Destination Port 80 Layer 3 protocol 6 TOS byte 0 Ingres Interface Ethernet 0 Src. IP Dest. IP Src. Port Dest. Port Layer 3 Prot. TOS Byte Ingress Intf. App Name Timesta mps Byttes Packets 10.1.1.1 173.194.34.134 20457 80 6 0 Ethernet 0 HTTP 10.1.1.1 72.163.4.161 30307 80 6 0 Ethernet 0 Youtube NetFlow cache News Flexible NetFlow - NBAR Integration flow record app_record match ipv4 source address match ipv4 destination address match ….. match application name First packet of a flow will create the Flow entry using the Key Fields” Remaining packets of this flow will only update statistics (bytes, counters, timestamps) DEVNET-2047 10
  • 11. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public Source IP Dest. IP Source Port Dest. Port Protocol TOS Input I/F … Pkts 3.3.3.3 2.2.2.2 23 22078 6 0 E0 … 1100 Traffic Analysis Cache Flow Monitor 1 Traffic Non-Key Fields Packets Bytes Timestamps Next Hop Address Security Analysis Cache Flow Monitor 2 Metering Process Multiple Monitors with Unique Key Fields Key Fields Packet 1 Source IP 3.3.3.3 Destination IP 2.2.2.2 Source Port 23 Destination Port 22078 Layer 3 Protocol TCP - 6 TOS Byte 0 Input Interface Ethernet 0 Key Fields Packet 1 Source IP 3.3.3.3 Destination IP 2.2.2.2 Input Interface Gi0/1 Non-Key Fields Packets Timestamps Source IP Dest. IP Input I/F … Pkts 3.3.3.3 2.2.2.2 Gi0/1 … 11000 DEVNET-2047 11
  • 12. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public Key Fields vs Non-Key Fields match ipv4 dscp match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port match interface input collect interface output collect counter bytes long collect counter packets collect policy qos class hierarchy collect policy qos queue drops • Uniquely identifies flow and aggregates the usage statistics • Flexible number of match statements • Identifies parameters to collect and export • Flexible number of collect statements
  • 13. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public Where do I want my data sent? What data do I want to meter? Creates a new NetFlow cache Attach the flow record Exporter is attached to the cache Potential sampling configuration Configure NetFlow on the interface flow exporter my-exporter destination 1.1.1.1 flow record my-record match ipv4 destination address match ipv4 source address collect counter bytes flow monitor my-monitor exporter my-exporter record my-record int s3/0 ip flow monitor my-monitor input Flexible NetFlow – Configuration Configure the Exporter Configure the Flow Record Configure the Flow Monitor Configure the interface DEVNET-2047 13
  • 14. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public Use Case #1 – Application Client-Server Stats Traffic statistics per client and server flow record RECORD-CLIENT-SERVER-STATS match ipv4 dscp match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port match interface input match application name [account-on-resolution] collect interface output collect counter bytes long collect counter packets (..) ! “match application name”: calls NBAR2 “account-on-resolution”: accurate accounting until classification flow record RECORD-CLIENT-SERVER-STATS match application name [account-on-resolution] collect interface output collect counter bytes long collect counter packets (..) !vs DEVNET-2047 14
  • 15. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public Use Case #2 – IP Accounting Replacement Collecting Per DSCP Usage – Example flow record RECORD-FNF-DSCP-INGRESS match ipv4 dscp collect counter bytes long collect counter packets long collect application name ! Flow record is created for each DSCP value DEVNET-2047 15
  • 16. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public Flow Hierarchy Queue id Flow 1 P1, C1, C11 1 Flow 2 P1, C1, C11 1 Flow 3 P1, C1, C12 2 Queue id Queue packet drops 1 100 2 20 • For each flow, the class hierarchy and queue drops can now be exported through FNF • Class-ID to Name mapping provided through separate Option Templates • QoS Class-ID, Queue Drops and Queue Hierarchy Export with FNF Use Case #3 – QoS Queue Hierarchy Reports flow record RECORD-QoS-Hierarchy match ipv4 dscp match interface input collect policy qos class hierarchy collect policy qos queue drops ! policy-map P1 class C1 shaping average 16000000 service-policy child policy-map child class C11 bandwidth remaining percent 10 class C12 bandwidth remaining percent 70 class class-default bandwidth remaining percent 20 class-map match-all C1 match any class-map match-all C11 match ip dscp ef class-map match-all C12 match ip dscp cs2
  • 17. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public NBAR2 Field Extraction • Ability to look into specific applications for additional field information • NBAR2 extracted fields from HTTP, RTP, PCOIP, etc… for QoS configuration • HTTP Header Fields • Eases classification of voice and video traffic • VoIP, streaming/real time video, audio/video conferencing, Fax over IP • Distinguishes between RTP packets based on payload type and CODECS • Some extracted fields within Flexible NetFlow and Unified Monitoring Overview Protocol Fields Length FNF Configuration Syntax HTTP URL * collect application http url HTTP Host 50 collection application http host HTTP User-agent 200 collection appllication http user-agent HTTP Referer * collect application http referer RTSP Host 50 collection application rtsp host-name SMTP Server 50 collect application smtp server SMTP Sender 50 collect application smtp sender POP3 Server 50 collect application pop3 server NNTP Group Name 50 collect application nntp group-name SIP Source Domain 50 collect application sip source SIP Destination Domain 50 collect application sip destination DEVNET-2047 17
  • 18. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public NBAR2 HTTP Field Extraction GET /weather/getForecast?time=37&&zipCode=95035 HTTP/1.1 Host: svcs.cnn.com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:14.0) Gecko/20100101 Firefox/14.0.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.cnn.com/US/ www.cnn.com (IP=157.166.255.18) http://www.cnn.com/US Se0/0/0 (IP=192.168.100.100)  Ability to extract information from HTTP message collect application http URL collect application http host collect application http user-agent collect application http referer DEVNET-2047 18
  • 19. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public Use Case #4 - Top Domain and URL Hit Count Report Configuration Sample • NBAR extracts fields from flows and exposes it into Application Response Time Engine (ART). • ISRG2/ASR1k: ART Metrics integrated with Unified Monitoring • Requires IPFIX export for variable length fields (URL) flow record type performance-monitor ART-RECORD-URL match connection transaction-id collect application http url collect application http host ASR1k – Unified Monitoring flow record type mace PA-RECORD collect application http uri statistics collect application http host ! ISR-G2k - Unified Monitoring & MACE (backward compatibility) Using a connection/transaction records with export on transaction-end. So hit count =1, each URL is exported on a different record. ISRG2 supports MACE also for backward compatibility DEVNET-2047 19
  • 20. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public NBAR2 Field Extraction • NBAR2 Sub-application ID Format (variable length) Sub-application ID Format NBAR App ID Sub App ID Extracted Value 0x03000050 0x3402 www.cisco.com 4 bytes 2 bytes Variable length NBAR Application ID, i.e. 0x03000050 = HTTP NBAR Sub-application ID – from show ip nbar parameters extraction and sub-application-table option template. Only take the last two bytes, 0x3402 = HTTP Host Extracted value flow record MYRECORD collect application http host Engine ID Selector ID 1 byte 3 bytes 0x03 = port (IANA_L4_STANDARD, ID: 3) 0x000050 = 80 ASR1#sh flow exporter option application table | inc 3:80 3:80 http World Wide Web traffic 3:8080 http-alt HTTP Alternate 3:801 device device 13:80 cifs common internet file system ASR1# ASR1#sh ip nbar parameter extraction http Protocol Parameter ID -------- --------- -- http referer 209924 http user-agent 209923 http host 209922 http url 209921 ASR1# 0x33402 DEVNET-2047 20
  • 21. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public NBAR2 Field Extraction Sub-port Classification Citrix Edonkey FastTrack Gmail Gnutella Kazaa2 RTP Webex- meeting ica-tag text-chat file-transfer file-transfer file-transfer file-transfer audio audio app file-transfer video video search-file- name payload- type payload- type Citrix: http://www.cisco.com/en/US/docs/ios/qos/command/reference/qos_m1.html#wp1037938 Fasttrack: http://www.cisco.com/en/US/docs/ios/qos/command/reference/qos_m1.html#wp1038015 Gnutella: http://www.cisco.com/en/US/docs/ios/qos/command/reference/qos_m1.html#wp1038081 RTP: http://www.cisco.com/en/US/docs/ios/qos/command/reference/qos_m1.html#wp1038481 HTTP: http://www.cisco.com/en/US/docs/ios/qos/command/reference/qos_m1.html#wp1058795 DEVNET-2047 21
  • 22. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public Application Attributes – Group Based Reports 1400 Apps Traffic Class VoIP Telephony Broadcast Video Real-Time Interactive Multimedia Conferencing Multimedia Streaming Network Control Signaling Ops / Admin / Mgmt (OAM) Transactional Data Bulk Data Best Effort Scavenger Business Relevance Business Relevant Default Business Irrelevant DEVNET-2047 22
  • 24. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public When users complain about Application Problem Network is very slow, I am not able to get any work done ping? show ip route? traceroute? show interface? I don’t see any thing wrong Increased Latency WAN Problems Application Problems Server Problems User Problems DEVNET-2047 24
  • 25. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public Application Performance Monitoring Traffic Statistics HTTP HTTP Voice and Video Performance (Perf-Mon) Performance Collection 30% of bandwidth is voice and video Critical Applications Performance (Application Response Time) 40% of bandwidth is critical applications What applications, how much bandwidth, flow direction? (Flexible NetFlow and NBAR2) • Perf-Mon monitors voice and video application for latency, delay, jitter • ART monitors TCP applications for network/client/server delay DEVNET-2047 25
  • 26. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public Use Case • All IP Apps • L3-L4 Metrics Platforms • ISR G2 • ASR1K/ XE • Cat6K • Cat4K • 3850 • NAM Use Case • HTTP, TCP Apps • L4-L7 Metrics Platforms • ISR G2 • ASR1K/ XE • NAM Use Case • Voice, Video Apps • L4 – L7 Metrics Platforms • ISR G2 • ASR1K/ XE • Cat6K • Cat4K • Cat3K • 3850 Performance Monitoring Single Flow Record Type • RTP SSRC • RTP Jitter (min/max/mean) • Transport Counter (expected/loss) • Media Counter (bytes/packets/rate) • Media Event • Collection interval • TCP MSS • TCP round-trip time • CND - Client Network Delay (min/max/sum) • SND – Server Network Delay (min/max/sum) • ND – Network Delay (min/max/sum) • AD – Application Delay (min/max/sum) • Total Response Time (min/max/sum) • Total Transaction Time (min/max/sum) • Number of New Connections • Number of Late Responses • Number of Responses by Response Time • (7-bucket histogram) • Number of Retransmissions • Number of Transactions • Client/Server Bytes • Client/Server Packets • L3 counter (bytes/packets) • Flow event • Flow direction • Client and server address • Source and destination address • Transport information • Input and output interfaces • L3 information (TTL, DSCP, TOS, etc.) • Application information (from NBAR2) • Monitoring class hierarchy Media Monitoring Application Response Time Other Metrics  All performance metrics are consolidated into one flow record type performance-monitor DEVNET-2047 26
  • 27. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public Application Response Time Network Path Segments • Application response time provides insight into application behavior (network vs server bottleneck) to accelerate problem isolation • Separate application delivery path into multiple segments • Server Network Delay (SND) approximates WAN Delay • Latency per application Application Servers Total Delay Client Network Clients Client Network Delay (CND) Application Delay (AD) Network Delay (ND) AVC Server Network Request Response Server Network Delay (SND) DEVNET-2047 27
  • 28. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public TT Client Server X SYN SYN-ACK ACK 6 Request 1 ACK DATA 4 DATA 3 DATA 5 DATA 3 Request 1 (Cont) X DATA 4 DATA 1 Request 2 DATA 6 DATA 2 ACK 3 ACK SND CND Understand IOS ART Metrics Calculation Request Response Retransmission RT Response Time (RT) t(First response pkt) – t(Last request pkt) Transaction Time (TT) t(Last response pkt) – t(First request pkt) Network Delay (ND) ND = CND + SND Application Delay (AD) AD = RT – SND Quantify User Experience Identify Server Performance Issue ART DEVNET-2047 28
  • 29. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public flow record RECORD-FNF match ipv4 tos match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port match interface input match flow direction collect interface output collect counter bytes long collect counter packets flow record type performance-monitor my-rec match routing vrf input match ipv4 protocol match application name account-on-resolution match connection client ipv4 address match connection server ipv4 address match connection server transport port collect connection new-connections collect connection sum-duration collect connection server counter bytes long collect connection server counter packets long collect connection client counter bytes long collect connection client counter packets long flow record type performance-monitor my-rec match routing vrf input match ipv4 protocol match application name match connection client ipv4 address match connection server ipv4 address match connection server transport port collect ipv4 dscp collect connection delay response to-server sum collect connection server counter responses collect connection delay network to-server sum collect connection delay network to-client sum flow record type performance-monitor pm-ipv4 match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port match ipv4 protocol match transport rtp ssrc collect transport packets lost counter collect transport packets lost rate collect transport rtp jitter mean collect transport rtp jitter minimum collect transport rtp jitter maximum collect application media packets rate Flexible Netflow – Unified Monitoring Common CLI and Framework to Export Various Metrics Netflow Conversation Stats Perf-Mon ART Define Flow Exporter - where to send Apply Flow monitor to Interface, Direction Define Flow Record - Match & Collect Common Flexible Netflow Based MonitoringUnified Monitoring with Metric Mediation Agent (MMA) is available since 15.4(1)T Customer are advised to migrate from MACE to MMA
  • 31. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public eZPM Profile Predefined profilesfor monitoring • Enable ez-PM CLI to get visibility + monitoring stats reported via netflow to prime • Configures exporters • Enable / Disables various traffic-monitors (a.k.a tools) • For each traffic-monitor, overrides some default parameters (IPv4/6, Ingress/Egress, traffic to which the monitor is applied, cache size..) • Equivalent ~650 lines of configuration Monitor Name Default Traffic Classification Application- Response-Time (ART) All TCP URL HTTP applications Media RTP applications over UDP Conversation- Traffic-Stats Remaining traffic not matching other classifications DEVNET-2047 31
  • 32. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public Types of ezPM Profiles • application-stats • application-client-server-stats • application-response-time • url • media • application-traffic-stats • conversion-traffic-stats • application-response-time • url • media • application-stats • application-client-server-stats •Addresses most common deployments (capacity planning) with more details than application-stats profile •Aggregated App level stat (examples - “Top N Apps, BW per App, Top clients/servers per App” •Additional metrics, granularity • Selectively enable “fine grain” only for critical apps (and not all traffic). • Performance metrics • Very detailed • Addresses most common deployments (capacity planning) • Aggregated App level stat (examples - “Top N Apps, BW per App, Top clients/servers per App” • Per interface/Application statistics • Per client/server/application/interface statistics Application Stats Application Performance Application Experience DEVNET-2047 32
  • 33. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public ezPM Profile ! User defined ezPM context performance monitor context MYTEST profile application-statistics exporter destination 10.10.10.10 source GigabitEthernet0/0/1 traffic-monitor application-stats traffic-monitor application-client-server-stats ! ! Attach the context to the interface interface GigabitEthernet0/0/2 performance monitor context MYTEST ! ! User defined ezPM context performance monitor context MYTEST profile application-performance traffic-monitor url traffic-monitor application-client-server-stats traffic-monitor application-stats traffic-monitor application-response-time traffic-monitor media ! ! Attach the context to the interface interface Ethernet0/0 performance monitor context MYTEST ! ! User defined ezPM context performance monitor context MYTEST profile application-experience traffic-monitor url traffic-monitor application-traffic-stats traffic-monitor conversation-traffic-stats traffic-monitor application-response-time ! ! Attach the context to the interface interface Ethernet0/0 performance monitor context MYTEST DEVNET-2047 33
  • 34. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public Opportunities for Follow-up Become a DevNet Community member: www.developer.cisco.com AVC DevNet Page: https://developer.cisco.com/site/app-vis-control/overview/ DEVNET-2047 34
  • 35. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public Continue Your Education in the DevNet Zone • Take the DevNet Workshop • DEVNET-2048: Application Visibility and Experience through Flexible Netflow Workshop • Meet the Experts at the Demo Pods DEVNET-2047 35
  • 36. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public Complete Your Online Session Evaluation Don’t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online • Give us your feedback to be entered into a Daily Survey Drawing. A daily winner will receive a $750 Amazon gift card. • Complete your session surveys through the Cisco Live mobile app or from the Session Catalog on CiscoLive.com/us. DEVNET-2047 36
  • 37. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public Continue Your Education • Demos in the Cisco campus • Walk-in Self-Paced Labs • Lunch & Learn • Meet the Engineer 1:1 meetings • Related sessions DEVNET-2047 37
  • 38. Please join us for the Service Provider Innovation Talk featuring: Yvette Kanouff | Senior Vice President and General Manager, SP Business Joe Cozzolino | Senior Vice President, Cisco Services Thursday, July 14th, 2016 11:30 am - 12:30 pm, In the Oceanside A room What to expect from this innovation talk • Insights on market trends and forecasts • Preview of key technologies and capabilities • Innovative demonstrations of the latest and greatest products • Better understanding of how Cisco can help you succeed Register to attend the session live now or watch the broadcast on cisco.com