Educause Security Discussion mailing list archives
Re: netflow analysis
From: Bill Yurcik <byurcik () NCSA UIUC EDU>
Date: Fri, 13 May 2005 16:02:16 -0500
I'll put in a plug for our visual NetFlow analysis tools: NVisionIP <http://security.ncsa.uiuc.edu/distribution/NVisionIPDownLoad.html> and VisFlowConnect <http://security.ncsa.uiuc.edu/distribution/VisFlowConnectDownLoad.html> an overview of the project and papers describing their operation and design can be found off this project homepage: <http://www.ncassr.org/projects/sift/> I'd love to get feedback from anyone who uses them, especially bad feedback we can use to improve. Cheers! - Bill Yurcik/NCSA On Thu, 12 May 2005, David Shettler wrote:
Hello, I'm curious as to how people are handling their netflow data. We're thinking about putting it into a DB and designing our own interface for it. I haven't found any decent analysis tools (web based with search functionality specifically). Any recommendations? A good deal of tools out there seem to no longer be maintained. Appreciate any advice! David C. Shettler - GCFA Senior Technical Services Engineer College of the Holy Cross 508-793-3073 ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/.
********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/.
Current thread:
- netflow analysis David Shettler (May 12)
- <Possible follow-ups>
- Re: netflow analysis Stephen Bernard (May 12)
- Re: netflow analysis Wyman Miles (May 12)
- Re: netflow analysis stanislav shalunov (May 12)
- Re: netflow analysis Tristan RHODES (May 12)
- Re: netflow analysis Arturo Servin (May 13)
- Re: netflow analysis Pete Hoffswell (May 13)
- Re: netflow analysis David Shettler (May 13)
- Re: netflow analysis David Shettler (May 13)
- Re: netflow analysis Bill Yurcik (May 13)
- Re: netflow analysis Wyman Miles (May 18)