nanog mailing list archives
Re: Why do you use Netflow
From: "Paul A. Bradford" <paul.bradford () adelphia com>
Date: 19 Aug 2003 16:16:47 -0400
Well, On ciscos, we use it to track down DOS attacks in a put it on, troubleshoot, take it off manner. Works great on not Catalyst stuff... put it on.. wait 30 seconds look for anything with K packets and you've got your bad guy, hopefully. Thanks, Paul On Tue, 2003-08-19 at 15:55, lance_tatman () agilent com wrote:
Are operators frequently using netflow nowadays? I assume that if you are, you turn it on only for some limited duration to collect your data and then go back and do your analysis. Is this assumption correct? What are you looking at when you analyze this data? I've seen uses such as top 10 destination AS's for peering evaluations. What else? Billing? -Lance-
-- Paul A Bradford Senior Network Engineer Adelphia Cable Communications 814-274-6663
Current thread:
- Why do you use Netflow lance_tatman (Aug 19)
- RE: Why do you use Netflow Mark Borchers (Aug 19)
- Re: Why do you use Netflow Petri Helenius (Aug 19)
- RE: Why do you use Netflow Mark Borchers (Aug 19)
- Re: Why do you use Netflow Petri Helenius (Aug 19)
- Re: Why do you use Netflow Jack Bates (Aug 19)
- Re: Why do you use Netflow Jason Frisvold (Aug 19)
- Re: Why do you use Netflow Jack Bates (Aug 19)
- Re: Why do you use Netflow james (Aug 19)
- Message not available
- Re: Why do you use Netflow james (Aug 19)
- Re: Why do you use Netflow Jason Frisvold (Aug 19)
- RE: Why do you use Netflow Mark Borchers (Aug 19)
- Rules and Regs for a LEC's and Non LEC's Aaron D. Britt (Aug 19)
- Re: Rules and Regs for a LEC's and Non LEC's alex (Aug 19)