-----BEGIN PGP SIGNED MESSAGE-----
- --On August 30, 2005 12:25:31 -0400 Raffael Marty raffy@raffy.ch wrote:
| I am doing some research on NetFlow and wanted to ask you guys a few things: | | How are you using NetFlow? For what purposes? Billing? Security? Do you | have NetFlow enabled on all your routers? Do you enable it on all the | interfaces or just on the external/internal interface? Do you utilize any | tool to stitch the NetFlows back together? Why would you do that? | | I guess you can tell that I was never exposed to NetFlow in the ISP world. | Any answers or comments are really appreciated.
You may have a look at our tools from SWITCH-CERT. We use them mostly for security related issues.
Backend: http://nfdump.sourceforge.net/ Frontend: http://nfsen.sourceforge.net/
- Peter
| | Thanks | | -raffy | | -- | Raffael Marty, GCIA, CISSP | Senior Security Engineer @ ArcSight Inc. | _______________________________________________ | swinog mailing list | swinog@lists.swinog.ch | http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog |
- -- _______ SWITCH - The Swiss Education and Research Network ______ Peter Haag, Security Engineer, Member of SWITCH CERT PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7 SWITCH, Limmatquai 138, CH-8001 Zurich, Switzerland E-mail: peter.haag@switch.ch Web: http://www.switch.ch/