Educause Security Discussion mailing list archives

Re: Network flow log consolidation


From: Valdis Kletnieks <Valdis.Kletnieks () VT EDU>
Date: Tue, 25 Apr 2006 21:22:02 -0400

On Tue, 25 Apr 2006 19:19:30 EDT, Steve Bernard said:

You may want to take a look at 'flow-tools'.  CAIDA used to support a couple
of applications, 'cflowd' and 'flowscan', but they are no longer active or supported.

http://www.splintered.net/sw/flow-tools/

Note that flow-tools is the Swiss Army Knife or Perl of netflow programs.
It won't do much by itself, but can be used to build almost any sort of
reporting/summarizing that you want....

Attachment: _bin
Description:


Current thread: