Educause Security Discussion mailing list archives
Re: Network flow log consolidation
From: Valdis Kletnieks <Valdis.Kletnieks () VT EDU>
Date: Tue, 25 Apr 2006 21:22:02 -0400
On Tue, 25 Apr 2006 19:19:30 EDT, Steve Bernard said:
You may want to take a look at 'flow-tools'. CAIDA used to support a couple of applications, 'cflowd' and 'flowscan', but they are no longer active or supported. http://www.splintered.net/sw/flow-tools/
Note that flow-tools is the Swiss Army Knife or Perl of netflow programs. It won't do much by itself, but can be used to build almost any sort of reporting/summarizing that you want....
Attachment:
_bin
Description:
Current thread:
- Network flow log consolidation Logan Browne (Apr 25)
- <Possible follow-ups>
- Re: Network flow log consolidation Wes Young (Apr 25)
- Re: Network flow log consolidation Justin Dover (Apr 25)
- Re: Network flow log consolidation Jenkins, Matthew (Apr 25)
- Re: Network flow log consolidation Justin Dover (Apr 25)
- Re: Network flow log consolidation Graham Toal (Apr 25)
- Re: Network flow log consolidation Jenkins, Matthew (Apr 25)
- Re: Network flow log consolidation Wes Young (Apr 25)
- Re: Network flow log consolidation John Rasmussen (Apr 25)
- Re: Network flow log consolidation Steve Bernard (Apr 25)
- Re: Network flow log consolidation Valdis Kletnieks (Apr 25)
- Network flow log consolidation Kim Cary (Apr 26)
- Re: Network flow log consolidation Ensz, Sean A. (Apr 27)
- Re: Network flow log consolidation David Grisham (Apr 27)
- Re: Network flow log consolidation Tristan RHODES (May 01)