On Wed, Mar 14, 2018 at 3:06 AM, Gregory Edigarov <ediga...@qarea.com> wrote: > Sorry, if I hijack the thread, but what do you guys use for netflow > analysis? > Only know nfsen in ports, but sometimes I need more versatile tool.
nfdump is rather powerful if you don't need a pretty GUI; it's like tcpdump, but for NetFlow/IPFIX data. I have it scripted to produce regular reports, but also run it ad hoc.