2002 - cesnet

For displaying detailed information about a data flow, it is more convenientto use statistics generated from non-aggregated data that are stored in hourlytables. In this case, you can also choose from much more search criteria thanthose contained in the statistics generated from aggregated information, whichis described above. The output is formatted as a table with links pointing to detailedinformation about used IP addresses or autonomous systems.Figure 15.2: Statistics based on non-aggregated data15.3 NetFlow EventThe third component of the NetFlow Analyser system maintains sending ofinformation to selected targets. For a given message, multiple addressees andthe message type (e-mail, SMS) can be specified in the system. Event types towhich specific rules should apply are optional. For example, it is possible todefine that all information should be sent by e-mail, but critical errors shouldbe sent to a mobile phone.In the future, we plan to add the support for sending messages to pagers and toa directly connected SMS gateway. Unfortunately, we did not manage to implementany information aggregation this year. Currently, every item is sent individually,which may lead to the unpleasant mailbox overflow effect.172 High-speed National Research Network and its New Applications 2002