Re: NetFlow for IDS

[Gianpiero Porchia <gianpiero.porchia () gmail com>]

Hi,

don't forget Netscout (www.netscout.com). 

You can get Netflow, sFlow, RMON and MIBII with it.

- gian
   _____
Ing. Gianpiero Porchia
Network & Security Consultant

ATS - Advanced Telecom Systems S.p.A.
Designing, Testing, Managing Network Quality

Via Salgari, 17 - 41100 Modena - ITALY

Tel   +39 059 821332
Fax  +39 059 821492



On 7/14/05, Andy Cuff <lists () securitywizardry com> wrote:
> Netflow data offers a valuable source of IDS information. To this end Jeff
> Ames has detailed all known Netflow analysis tools on a single page at
> http://securitywizardry.com/protNetFlowA.htm
>
> As always please notify us of any omissions or errors
>
>   Regards
> Andy Cuff
> Chief Technology Officer
> Computer Network Defence Ltd
> http://SecurityWizardry.com
> Phone (+44) (0) 7968 608945
>
>
>
>
> --------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it with real-world attacks from
> CORE IMPACT.
> Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
> to learn more.
> --------------------------------------------------------------------------


-- 
   _____
Ing. Gianpiero Porchia
Security Consultant

ATS - Advanced Telecom Systems S.p.A.
Designing, Testing, Managing Network Quality

Via Salgari, 17 - 41100 Modena - ITALY

Tel   +39 059 821332
Fax  +39 059 821492

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------