Re: Netflow

[Paul Dokas <dokas () OITSEC UMN EDU>]

John Kaftan wrote:
> Can anyone give me any tips on this in terms of configuration on the Cisco
> and a tool for analysis?


I recommend NfSen and nfdump:

  http://nfsen.sourceforge.net/

  http://nfdump.sourceforge.net/

The later URL has instructions on configuring Cisco routers to export flows.

Paul
--
Paul Dokas                                            dokas at umn.edu
======================================================================
Don Juan Matus:  "an enigma wrapped in mystery wrapped in a tortilla."