The continuous increase of line speeds and throughput in modern computer networks has considerably stimulated the usage of aggregation-based monitoring techniques for network management in the past years. Amongst those, flow-based approaches have become extremely popular among researchers and operators due to the wide availability of hardware and software flow exporters and their quasistandardized exporting formats, such as NetFlow or IPFIX. While flow-based monitoring was originally used for simple diagnosing and accounting purposes, researchers are now proposing flow-based approaches for a wide range of application fields, such as intrusion detection, traffic classification, and resource management. Several trends can be identified in flow-based monitoring. First of all, we observe more and more attempts to close the gap between packet-based and flow-based monitoring. As the latter was originally proposed as an efficient and scalable alternative to Deep Packet Inspection (DPI) in high-speed networks, the most recent flow exporters allow for enriching flow data with application-layer information, for example. It can be expected that this will lead to new approaches and solutions for network management problems. Second, IPFIX is evolving towards a generic protocol for exporting structured data. For example, the IPFIX Working Group has investigated the use of IPFIX for exporting SNMP Management Information Base (MIB) variables. Another example was showcased at the IETF-87 meeting, where room temperatures were exported to a central collection point using IPFIX. Since IPFIX is a push protocol, it will provide an effective way for network managers to continuously collect information from remote hosts. Finally, new environments, such as Clouds and Software Defined Networks (SDN), demand new flow-based solutions for their monitoring and management. OpenFlow, the most prominent protocol for SDN, is flow-based, highlighting the need for network managers to monitor and understand trends in flows through their networks. Thus, the goal of this Special Issue of the International Journal on Network Management is to present innovative flow-based approaches and solutions for network management tasks, as well as new methods and technologies for the generation, processing and analysis of flow information. The articles in this Special Issue present research results and a survey on the usage of flow-based approaches, and on the design and implementation of high-speed monitoring devices. A total of 22 submissions was received for this Special Issue, for which we wish to thank all authors. Three papers did not go through the full review process because they were identified early as out of scope. Each of the remaining 19 papers received at least three independent reviews. In total, 47 reviewers participated in the review process. Based on their reviews, seven papers were finally selected for publication.
Read full abstract