Flow Specification Criteria with the OC3MON

The granularity for flow endpoints has to be chosen upon start of the OC3MON software on the PC. It cannot be changed at runtime. The following flow criteria are possible:

• [``sh'':] Source Host Only
• [``dh'':] Destination Host Only
• [``hp'':] Host Pair
• [``sn'':] Source Network Only
• [``dn'':] Destination Network Only
• [``np'':] Net Pair
• [``pq'':] Address/Port quadruples

Additionally, an analysis that uses autonomous system (AS) numbers instead of IP addresses is possible with the latest versions of OC3MON. This allows network operators to gain very interesting insights in who (which countries etc.) is actually using their infrastructure.