|
|
|
The first issue to be assessed is the nature of the application traffic questions to be answered. There are both topological and directionality aspects to this issue.
From a topological perspective, the important factor is that the traffic presented to EFC covers the desired traffic set. For example, this may be the set of all external traffic, or in other contexts, it may be the set of all traffic for a specific section of the network. In either case, it's important that the traffic flow information that the EFC module sees is aligned with the scope of the reporting interest.
NOTE: CNA reports on the volume and nature of traffic flows it observes, but it does so in a way that is completely independent of the in/out directionality of traffic. For example, if only outbound traffic is presented to EFC, then all application traffic reports will represent outbound traffic. If the EFC module sees bi-directional traffic flow data, then all application traffic reports will be based on the sum of inbound and outbound traffic.
|
|
|