Return-Path: X-Original-To: nmrg@ibr.cs.tu-bs.de Delivered-To: nmrg@ibr.cs.tu-bs.de Received: from denhaag.ewi.utwente.nl (denhaag.ewi.utwente.nl [130.89.10.11]) by salvator.ibr.cs.tu-bs.de (Postfix) with ESMTP id 7FE9513FE4 for ; Fri, 9 Jul 2010 12:05:33 +0200 (CEST) Received: from leeuwarden.cs.utwente.nl (leeuwarden.ewi.utwente.nl [130.89.10.54]) by denhaag.ewi.utwente.nl (8.13.6/8.13.6) with ESMTP id o69A5JJp020384 for ; Fri, 9 Jul 2010 12:05:21 +0200 (MEST) Received: from [130.89.227.156] (wlan227156.mobiel.utwente.nl [130.89.227.156]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by leeuwarden.cs.utwente.nl (Postfix) with ESMTP id D2AAE37C7FF for ; Fri, 9 Jul 2010 12:05:20 +0200 (CEST) Message-ID: <4C36F460.3000805@ewi.utwente.nl> Date: Fri, 09 Jul 2010 12:05:20 +0200 From: Ramin Sadre User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.1.10) Gecko/20100512 Lightning/1.0b1 Thunderbird/3.0.5 MIME-Version: 1.0 To: nmrg@ibr.cs.tu-bs.de Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Score: -2.884 () ALL_TRUSTED, AWL, FVGT_u_HAS_2LETTERFLDR, RATWARE_GECKO_BUILD X-Scanned-By: MIMEDefang 2.52 on 130.89.10.11 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-3.0rc3 (denhaag.ewi.utwente.nl [130.89.10.11]); Fri, 09 Jul 2010 12:05:32 +0200 (MEST) X-Virus-Scanned: clamav-milter 0.96.1 at salvator X-Virus-Status: Clean X-Spam-Status: No, score=-2.6 required=5.0 tests=BAYES_00 autolearn=ham version=3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on salvator.ibr.cs.tu-bs.de Subject: [nmrg] Call for Participation: 3rd NMRG Workshop on Netflow/IPFIX Usage in Network Management X-BeenThere: nmrg@ibr.cs.tu-bs.de X-Mailman-Version: 2.1.11 Precedence: list List-Id: Network Management Research Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Jul 2010 10:05:36 -0000 Call for Participation 3rd NMRG Workshop on Netflow/IPFIX Usage in Network Management July 30, 2010, Maastricht, The Netherlands (Friday, last day of the 78th IETF meeting in Maastricht) Flow-based approaches are used in various areas of network management today, such as link monitoring, accounting, and security. As in the previous years, the goal of this workshop is to be a place where researchers, operators and manufacturers can exchange and discuss their experiences and ideas on the usage of Netflow/IPFIX in network management. Venue: This IRTF-NMRG workshop is part of the 78th IETF meeting in the MECC conference center in Maastricht (NL). Detailed information on the meeting agenda and the venue can be found here: http://www.ietf78.nl/home.html https://datatracker.ietf.org/meeting/78/agenda.html More specifically, the workshop will take place in room "0.8 Rome". Registration: Participants have to register to the IETF meeting: http://www.ietf.org/meeting/register.html Please note the early-bird deadline on July 16 and the special fees for one-day participants and students. In addition, if not already done so, participants should send a notification mail to: Ramin Sadre, sadrer@ewi.utwente.nl Draft workshop agenda: 09:00 Opening 09:10 Using of time characteristic in Netflow data for improvement of protocol detection Jiri Novotny, Masaryk University/INVEA-TECH Flow signatures of popular applications Nikolay Melnikov, Jacobs University Bremen IPTV Traffic Monitoring System with IPFIX/PSAMP Shingo Kashima, NTT 10:25 Short break 10:40 Presentation title tba Benoit Claise, Cisco A Labeled Data Set For Flow-based Intrusion Detection Anna Sperotto, University of Twente 11:30 Lunch break 13:00 Malware Detection From The Network Perspective Using NetFlow Data Pavel Celeda, Masaryk University Characterization of accuracy problems in NetFlow data and approaches to handle them Jochen Koegel, University of Stuttgart 14:00 Coffee break 14:15 ripfix: Rapid Prototyping and Debugging of IPFIX Applications in Ruby Brian Trammell, ETH Zurich The Tranalyzer and Traviz tools Stefan Burschka, Swisscom/CSIT The trace2netFlow tool Lucjan Janowski, AGH Poland 15:15 End On behalf of the workshop chairs Ramin Sadre (University of Twente) Aiko Pras (University of Twente) Return-Path: X-Original-To: nmrg@ibr.cs.tu-bs.de Delivered-To: nmrg@ibr.cs.tu-bs.de Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by salvator.ibr.cs.tu-bs.de (Postfix) with ESMTP id 4B80414136 for ; Sat, 3 Jul 2010 09:36:44 +0200 (CEST) Received: from localhost (demetrius4.jacobs-university.de [212.201.44.49]) by hermes.jacobs-university.de (Postfix) with ESMTP id 37A7DC000A; Sat, 3 Jul 2010 09:36:44 +0200 (CEST) Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius4.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id qKi42W1t6vSX; Sat, 3 Jul 2010 09:36:43 +0200 (CEST) Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id DB1D7C0006; Sat, 3 Jul 2010 09:36:39 +0200 (CEST) Received: by elstar.local (Postfix, from userid 501) id D1513137A150; Sat, 3 Jul 2010 09:36:39 +0200 (CEST) Date: Sat, 3 Jul 2010 09:36:39 +0200 From: Juergen Schoenwaelder To: Ramin Sadre Message-ID: <20100703073639.GB1942@elstar.local> Mail-Followup-To: Ramin Sadre , "nmrg@ibr.cs.tu-bs.de" References: <4C2E46A2.9050300@ewi.utwente.nl> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <4C2E46A2.9050300@ewi.utwente.nl> User-Agent: Mutt/1.5.20 (2009-06-14) X-Virus-Scanned: clamav-milter 0.96.1 at salvator X-Virus-Status: Clean X-Spam-Status: No, score=-2.6 required=5.0 tests=BAYES_00 autolearn=ham version=3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on salvator.ibr.cs.tu-bs.de Cc: "nmrg@ibr.cs.tu-bs.de" Subject: Re: [nmrg] Netflow/IPFIX workshop: status update X-BeenThere: nmrg@ibr.cs.tu-bs.de X-Mailman-Version: 2.1.11 Precedence: list Reply-To: Juergen Schoenwaelder List-Id: Network Management Research Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Jul 2010 07:36:46 -0000 On Fri, Jul 02, 2010 at 10:05:54PM +0200, Ramin Sadre wrote: > Unfortunately, we have to wait on the outcome of the discussions. > I hope we know more in a few days. The latest news is that the NMRG meeting remains scheduled for Friday July 30th as originally planned. We have multiple slots, starting from 09:00 and running until 15:15 (room 0.8 Rome) with a lunch break 11:30-13:00. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1, 28759 Bremen, Germany Fax: +49 421 200 3103 Return-Path: X-Original-To: nmrg@ibr.cs.tu-bs.de Delivered-To: nmrg@ibr.cs.tu-bs.de Received: from denhaag.ewi.utwente.nl (denhaag.ewi.utwente.nl [130.89.10.11]) by salvator.ibr.cs.tu-bs.de (Postfix) with ESMTP id 6CC4D14184 for ; Fri, 2 Jul 2010 22:05:57 +0200 (CEST) Received: from leeuwarden.cs.utwente.nl (leeuwarden.ewi.utwente.nl [130.89.10.54]) by denhaag.ewi.utwente.nl (8.13.6/8.13.6) with ESMTP id o62K5pCi028300 for ; Fri, 2 Jul 2010 22:05:51 +0200 (MEST) Received: from [192.168.2.103] (p4FDFAD9B.dip.t-dialin.net [79.223.173.155]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by leeuwarden.cs.utwente.nl (Postfix) with ESMTP id 6F56E37C804 for ; Fri, 2 Jul 2010 22:05:53 +0200 (CEST) Message-ID: <4C2E46A2.9050300@ewi.utwente.nl> Date: Fri, 02 Jul 2010 22:05:54 +0200 From: Ramin Sadre User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.1.10) Gecko/20100512 Lightning/1.0b1 Thunderbird/3.0.5 MIME-Version: 1.0 To: nmrg@ibr.cs.tu-bs.de Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Score: 0.58 () AWL,RATWARE_GECKO_BUILD X-Scanned-By: MIMEDefang 2.52 on 130.89.10.11 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-3.0rc3 (denhaag.ewi.utwente.nl [130.89.10.11]); Fri, 02 Jul 2010 22:05:54 +0200 (MEST) X-Virus-Scanned: clamav-milter 0.96.1 at salvator X-Virus-Status: Clean X-Spam-Status: No, score=-0.2 required=5.0 tests=BAYES_40 autolearn=ham version=3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on salvator.ibr.cs.tu-bs.de Subject: [nmrg] Netflow/IPFIX workshop: status update X-BeenThere: nmrg@ibr.cs.tu-bs.de X-Mailman-Version: 2.1.11 Precedence: list List-Id: Network Management Research Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Jul 2010 20:06:03 -0000 Dear all (copies have been also sent to individuals), You may wonder what the current status of the workshop is. As you may know, our goal is to organize the workshop as part of the 78th IETF meeting in Maastricht. It seems that the IETF has some trouble to set up a conflict-free schedule for the meeting - much more trouble than in previous years. Juergen reported that there were tons of emails by WG chairs after the draft agenda came online. Unfortunately, we have to wait on the outcome of the discussions. I hope we know more in a few days. Regards, Ramin Sadre