4–8 Nov 2024
US/Central timezone

Topic 1: Issues capturing ALL traffic with Zeek?

6 Nov 2024, 13:30
30m

Speakers

Aashish Sharma (LBNL)Dr David Crooks (UKRI STFC) David Jordan (University of Chicago (US)) Shawn Mc Kee (University of Michigan (US))

Description

We have some sites that have question/potential issues concerning the traffic measurements from Zeek vs SNMP.
- Should be expect that the Zeek traffic estimate should be close to the SNMP counters from the corresponding switch ports?
- Is some kind of NIC/hardware offloading hiding traffic from Zeek?
- Do we have best practice recommendations regarding configurations?
- What should sites expect regarding Zeek traffic monitoring and traffic estimations?

Presentation materials

There are no materials yet.