Network flow log consolidation

[Kim Cary <Kim.Cary () PEPPERDINE EDU>]

We're using nfacctd (packaged with pmacctd) with flowtools to collect/ 
parse/consolidate our netflow logs. It was a two day learning curve  
for someone with Unix SysAdmin, SQL & TCP/IP experience to set up.

Kim Cary, Ed.D.
Infrastructure Security Administrator

On Apr 25, 2006, at 9:00 PM, SECURITY automatic digest system wrote:

> Tangential to the discussion of syslog parsing, are any others on the
> list evaluating or implementing products to consolidate network flow
> logs? This would be a precursor to trend analysis and perhaps some
> security event correlation processes.