25th NMRG Meeting in Munich (Germany)

The 25th NMRG meeting took place in Munich (Germany) on October 30th. The organizers of this meeting are Ramin Sadre, University of Twente, Aiko Pras, University of Twente, and Helmut Reiser, LRZ Munich.

The workshop takes place at

Leibniz Rechenzentrum Munich (LRZ)
Boltzmannstrase 1
85748 Garching
in the seminar room 1. The LRZ in Garching can be reached as explained here. A list of hotels in Garching is available (ASCII file). It is also possible to stay near the station in Munich and take the underground to the LRZ (approx. 30 minutes).

The workshop is open to the public but the number of participants is limited. We kindly ask to register for this workshop (registration is free). Deadline for registration: October 15, 2008.


The goal of the workshop is to exchange and discuss experiences and ideas in the usage of Netflow/IPFIX in network management. Flow-based approaches are used in various areas of network management today, such as accounting, dependency discovery, and intrusion detection. The workshop will address these and other areas, as well as related activities such as flow collection and storage, querying, etc.


This is the agenda for the meeting:

09:00 Registration
09:30 Keynote (Benoit Claise, Cisco Systems)
10:15 Coffee break
10:30 Flow Record Query Languages (Vladislav Marinov, Jacobs University)
10:55 Using SQL Databases for Flow Processing (Anna Sperotto, University of Twente)
11:20 A Distributed Architecture for IP Flow Analysis (Cristian Morariu, Univeristy Zurich)
11:45 10G NetFlow Monitoring (Luca Deri, ntop.org)
12:10 Hardware acceleration of NetFlow monitoring (Jiri Novotny, Masaryk University)
12:35 Lunch break
13:30 Open Issues of Hierarchical Flow Aggregation (Christoph Sommer, University Erlangen)
13:55 Flow-based TCP Connection State Detection (Tobias Limmer, UniErlangen)
14:20 Self-management of optical networks - can we trust NetFlow data? (Tiago Fioreze, UT)
15:00 Coffee break
15:15 Using IPFIX/PSAMP for Anomaly Detection (Tanja Zseby, FOKUS)
15:40 Application Level Dependency Discovery with Flows (Olivier Festor, INRIA)
16:05 IPFIX for VoIP Monitoring (Sven Anderson, NECLAB)
16:45 Should we have a standard format for the annotation of Netflow/IPFIX traces?
17:30 Workshop close



  1. Sebastian Abt, rh-tec Business GmbH
  2. Sven Anderson, NECLAB Europe
  3. Dominik Bay, Verizon Business
  4. Robert Blechinger, IP Exchange GmbH
  5. Gregory Blepp, Fluke Networks
  6. Andreas Bourges, IsarNet AG
  7. Lothar Braun, TU Munchen
  8. Georg Carle, TU Munchen
  9. Pavel Celeda, CESNET
  10. Benoit Claise, Cisco
  11. Luca Deri, ntop.org
  12. Olivier Festor, INRIA Lorraine
  13. Christian Frage, IP Exchange GmbH
  14. Tiago Fioreze, University of Twente
  15. Farzad Ghannadian, Blue Coat Systems, Inc.
  16. Michael Gingele, NetDescribe GmbH
  17. Peter Haag, SWITCH-CERT
  18. David Hausheer, University of Zurich
  19. Thorben Jandling, SWITCH-CERT
  20. Tobias Limmer, University of Erlangen
  21. Vladislav Marinov, Jacobs University Bremen
  22. Cristian Morariu, University of Zurich
  23. Giovane C.M. Moura, University of Twente
  24. Gerhard Munz, TU Munchen
  25. Jiri Novotny, Masaryk University
  26. Juergen Quittek, NECLAB
  27. Aiko Pras, University of Twente
  28. Helmut Reiser, LRZ Munich
  29. Ramin Sadre, University of Twente
  30. Damien Saucez, Universite Catholique de Louvain
  31. Juergen Schoenwaelder, Jacobs University Bremen
  32. Christoph Sommer, University of Erlangen
  33. Anna Sperotto, University of Twente
  34. Bjorn Stelte, Universitat der Bundeswehr
  35. Burkhard Stiller, University of Zurich
  36. Szymon Trocha, PSNC
  37. Harald Weikert, IsarNet AG
  38. Ralf Wolter, Cisco Systems