If your using NetFlow in a security context the main difference is the lack of ORed TCP flags. Flags are very beneficial in determining client/server relationships as well as SYN flood conditions of various types.
On 11/30/05 5:08 AM, "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: > Hi there, > > > I don't manage to find any differences between Flows in version 5 and flows > in version 7. They seem to have the same fields (source IP address, > destination IP address, Layer 4 ports, ....). > > I have to configure it on some Cat 6500 and Cisco 7600 and I would like to > be sure to type : > > > mls nde sender version 5 > > > > Do you know some arguments against the one or the other ? > > > > Thanks ! > > Rémi > > > > > ************************************************************************* > This message and any attachments (the "message") are confidential and intended > solely for the addressee(s). > Any unauthorised use or dissemination is prohibited. E-mails are susceptible > to alteration. > Neither SOCIETE GENERALE nor any of its subsidiaries or affiliates shall be > liable for the message if altered, changed or > falsified. > ************ > Ce message et toutes les pieces jointes (ci-apres le "message") sont > confidentiels et etablis a l'intention exclusive de ses > destinataires. Toute utilisation ou diffusion non autorisee est interdite. > Tout message electronique est susceptible d'alteration. > La SOCIETE GENERALE et ses filiales declinent toute responsabilite au titre de > ce message s'il a ete altere, deforme ou falsifie. > ************************************************************************* > _______________________________________________ > Flow-tools mailing list > [EMAIL PROTECTED] > http://mailman.splintered.net/mailman/listinfo/flow-tools -- Adam Powers Director of Technology Lancope, Inc. c. 678.725.1028 e. [EMAIL PROTECTED] _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
