Educause Security Discussion mailing list archives

Re: netflow analysis


From: stanislav shalunov <shalunov () INTERNET2 EDU>
Date: Thu, 12 May 2005 17:41:31 -0400

David Shettler <dshettle () HOLYCROSS EDU> writes:

I'm curious as to how people are handling their netflow data.

Not sure if this is the kind of thing you're looking for, but the
nfstat package [1] will can be useful for tracking trends, etc.  It's
not intended for operational use.  On a lower level, one can use
flow-tools [2] or cflowd [3].  These will give you lower-level access
with ability to generate reports, and so forth, but you'd need to do
the scripting to generate whatever kind of reports you would like.

[1] http://www.internet2.edu/~shalunov/nfstat/

[2] http://www.splintered.net/sw/flow-tools/

[3] http://www.caida.org/tools/measurement/cflowd/

--
Stanislav Shalunov              http://www.internet2.edu/~shalunov/

This message is designed to be viewed at room temperature.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.

Current thread: