Educause Security Discussion mailing list archives

Re: Netflow

From: Brian Reilly <reillyb () GEORGETOWN EDU>
Date: Fri, 13 Oct 2006 16:31:16 -0400

On 10/13/06, John Kaftan <jkaftan () utica edu> wrote:
[...]


Can anyone give me any tips on this in terms of configuration on the Cisco
and a tool for analysis?


John,

Take a look at flow-tools (http://www.splintered.net/sw/flow-tools/)
and FlowScan (http://www.caida.org/tools/utilities/flowscan/).  James
Kretchmar's Open Source Network Administration
(http://www.phptr.com/bookstore/product.asp?isbn=0130462101) also has
a good chapter on using NetFlow.

--Brian

Current thread:

Netflow John Kaftan (Oct 13)
- <Possible follow-ups>
- Re: Netflow Clark, Joseph K (Oct 13)
- Re: Netflow Brian Reilly (Oct 13)
- Re: Netflow Julian Y. Koh (Oct 13)
- Re: Netflow Paul Dokas (Oct 13)