NetFlow: information loss or win?
Characteristics of network traffic flow anomalies