Re: Netflow Analysis Software

["Troy S. Jordan" <troyj () MAINE EDU>]

I've heard good things about a Solera networks offering that combines
full packet capture for a small, sliding window (say last X hours) into
netflow logging for a longer window (say last N days or weeks). This may
be standard for products in this space but that feature got my attention.

- Troy

On 5/4/2011 11:25 AM, win-hied () bradjudy com wrote:
> We use Lancope at Emory and have been pretty happy with the product.  We
> recently refreshed our hardware and are looking forward to the major
> version release
> (http://netflowninjas.lancope.com/blog/2011/02/announcing-stealthwatch-60.html). 
> It's supposed to add some interesting new features. 
>
>  
>
> We aren't using their sensors, just sFlow and Netflow out of our
> networking gear.
>
>  
>
> I haven't used the Fluke or SloarWinds products, but Lancope seems to
> have more of a security slant than those products (at least going by the
> webpages). 
>
>  
>
> Brad Judy
>
>  
>
> On May 4, 2011 at 11:13 AM Mike Iglesias <iglesias () UCI EDU> wrote:
>
> > On 05/04/2011 07:24 AM, Miller,James R wrote:
> > > We are looking at adding Netflow analysis to our networking toolkit. Has
> > > anyone had good or bad success with any particular vendors? Right
> now we are
> > > looking at Solar Winds and Fluke. Any comments or suggestions would
> be greatly
> > > appreciated.
> >
> > Another one is Lancope.  I don't know much about them, I stopped by their
> > booth at Educause SPC last month.  The product looked nice.
> >
> >
> > --
> > Mike Iglesias                          Email:       iglesias () uci edu
> > University of California, Irvine       phone:       949-824-6926
> > Office of Information Technology       FAX:         949-824-2270

-- 

                            Troy Jordan
                   t r o y j @ m a i n e . e d u
                           GIAC GCIH,GCIA
------------------------------------------------------------
                    Communications Specialist
                         Networkmaine
                 University of Maine System (UMS)
------------------------------------------------------------
233 Science Building               |     voice: 207.561.3590
Portland, ME 04103                 |     fax:   509.351.3650