Speakers
Aashish Sharma
(LBNL)Dr
David Crooks
(UKRI STFC)
David Jordan
(University of Chicago (US))
Shawn Mc Kee
(University of Michigan (US))
Description
We have some sites that have question/potential issues concerning the traffic measurements from Zeek vs SNMP.
- Should be expect that the Zeek traffic estimate should be close to the SNMP counters from the corresponding switch ports?
- Is some kind of NIC/hardware offloading hiding traffic from Zeek?
- Do we have best practice recommendations regarding configurations?
- What should sites expect regarding Zeek traffic monitoring and traffic estimations?