Educause Security Discussion mailing list archives
Re: netflow analysis
From: stanislav shalunov <shalunov () INTERNET2 EDU>
Date: Thu, 12 May 2005 17:41:31 -0400
David Shettler <dshettle () HOLYCROSS EDU> writes:
I'm curious as to how people are handling their netflow data.
Not sure if this is the kind of thing you're looking for, but the nfstat package [1] will can be useful for tracking trends, etc. It's not intended for operational use. On a lower level, one can use flow-tools [2] or cflowd [3]. These will give you lower-level access with ability to generate reports, and so forth, but you'd need to do the scripting to generate whatever kind of reports you would like. [1] http://www.internet2.edu/~shalunov/nfstat/ [2] http://www.splintered.net/sw/flow-tools/ [3] http://www.caida.org/tools/measurement/cflowd/ -- Stanislav Shalunov http://www.internet2.edu/~shalunov/ This message is designed to be viewed at room temperature. ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/.
Current thread:
- netflow analysis David Shettler (May 12)
- <Possible follow-ups>
- Re: netflow analysis Stephen Bernard (May 12)
- Re: netflow analysis Wyman Miles (May 12)
- Re: netflow analysis stanislav shalunov (May 12)
- Re: netflow analysis Tristan RHODES (May 12)
- Re: netflow analysis Arturo Servin (May 13)
- Re: netflow analysis Pete Hoffswell (May 13)
- Re: netflow analysis David Shettler (May 13)
- Re: netflow analysis David Shettler (May 13)
- Re: netflow analysis Bill Yurcik (May 13)
- Re: netflow analysis Wyman Miles (May 18)