Design for implementing NetFlow using existing session tables in devices like Stateful Inspection firewalls and Load balancers

摘要

Current technology trend is to implement multiple solutions in a single device. The devices like Stateful Inspection firewalls and Load balancers use session tables to maintain the session information. They also run traffic analyzers like NetFlow which are separate modules running on these devices. In this paper, we propose a design where session table and other existing processes can be effectively used to achieve the functionality of NetFlow.