/ Recent content on Code Mule Hugo en-us Fri, 03 Jul 2026 00:00:00 +0000 /posts/ipfix-ie315-spm/ Fri, 03 Jul 2026 00:00:00 +0000 /posts/ipfix-ie315-spm/ <h2 id="executive-summary">Executive Summary</h2> <p>Modern networks require both depth and speed in visibility. Traditional <strong>IPFIX (NetFlow v10)</strong> delivers rich flow context but with inherent latency. <strong>Sampled Port Mirroring (SPM)</strong> provides near real-time packet samples with payload visibility. <strong>IPFIX IE 315</strong> bridges the two by exporting sampled packet data inside standard IPFIX records.</p> <p>These technologies are <strong>not competitors</strong> — they are powerful complements, especially in high-speed DDoS protection scenarios.</p> <h2 id="what-is-ipfix">What is IPFIX?</h2> <p><strong>IPFIX</strong> (IP Flow Information Export) is the standardized evolution of NetFlow. It collects metadata about network flows — conversations defined by the 5-tuple (source/destination IP, ports, protocol).</p>