RE: Protocol analyzer reports

["theog" <theog () theog org>]

Did you consider trying ntop on a port mirror? (www.ntop.org) ?

Liran Cohen
RCT Internet solutions.
http://dir.rct.co.il
http://www.rct.co.il 

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Kurt Buff
Sent: Friday, August 24, 2007 2:32 AM
To: Emanuel Marufo
Cc: security-basics () securityfocus com
Subject: Re: Protocol analyzer reports

On 8/23/07, Emanuel Marufo <marufos () gmail com> wrote:
> Well Netflow is not open source but is free at least one of editions.
>
> May can help you.
>
> http://manageengine.adventnet.com/products/netflow/netflow-monitoring.html

Errr...

Netflow is output from various network equipment - mostly Cisco - and
should come with the equipment as native software. It's the software
that collects and massages/displays the Netflow output that is
sometimes costly.

However, ntop also accepts Netflow (and sflow) output, and works with it.

http://www.ntop.org

Kurt