On Tue, Jun 07, 2011 at 07:28:44AM +0200, Peter Haag wrote: > This all depends on your exporting device. netflow originally by design is > unidirectional only. Depending on your router > software and configuration, routers can recognise the direction of a flow. > However, on lots of devices this bit is > unused and set to zero, which is equal to 'incoming'.
But there's also some software that might help: ------------------------- Nfsight is a Netflow processing and visualization application designed to offer a comprehensive network awareness solution. It is developed as a Nfsen plugin to construct bidirectional flows out of the unidirectional netflow flows. Nfsight leverages these bidirectional flows to provide client/server identification and intrusion detection capabilities. http://nfsight.research.att.com/ ------------------------- ------------------------------------------------------------------------------ EditLive Enterprise is the world's most technically advanced content authoring tool. Experience the power of Track Changes, Inline Image Editing and ensure content is compliant with Accessibility Checking. http://p.sf.net/sfu/ephox-dev2dev _______________________________________________ Nfdump-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
