Netflow Traffic Analysis

Project Decription

Netflow based traffic analysis: We are evaluating a traffic analysis experiment against Tor wherein a server shapes TCP connection bandwidths and the adversary tries to determine the induced traffic fluctuation on candidate network links. The idea is to evaluate the power of using netflow information to correlate traffic entering and leaving the Tor network nodes. Having evaluated the effectiveness and accuracy of performing such traffic analysis we shall move to evaluating measures for decreasing such accuracy.

Some useful links :

CISCO IOS Protocol
NetFlow probes: fprobe and fprobe-ulog
flow-tools -- Tool set for working with NetFlow data
S. J. Murdoch and P. Zieli´nski. Sampled Traffic Analysis by Internet-Exchange-Level Adversaries . In: Proceedings of the 7th International Symposium on Privacy Enhancing Technologies (PETS), 2007. pp.167-183