-----BEGIN PGP SIGNED MESSAGE-----
- --On August 30, 2005 12:25:31 -0400 Raffael Marty <[EMAIL PROTECTED]> wrote: | I am doing some research on NetFlow and wanted to ask you guys a few things: | | How are you using NetFlow? For what purposes? Billing? Security? Do you | have NetFlow enabled on all your routers? Do you enable it on all the | interfaces or just on the external/internal interface? Do you utilize any | tool to stitch the NetFlows back together? Why would you do that? | | I guess you can tell that I was never exposed to NetFlow in the ISP world. | Any answers or comments are really appreciated. You may have a look at our tools from SWITCH-CERT. We use them mostly for security related issues. Backend: <http://nfdump.sourceforge.net/> Frontend: <http://nfsen.sourceforge.net/> - Peter | | Thanks | | -raffy | | -- | Raffael Marty, GCIA, CISSP | Senior Security Engineer @ ArcSight Inc. | _______________________________________________ | swinog mailing list | swinog@lists.swinog.ch | http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog | - -- _______ SWITCH - The Swiss Education and Research Network ______ Peter Haag, Security Engineer, Member of SWITCH CERT PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7 SWITCH, Limmatquai 138, CH-8001 Zurich, Switzerland E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (Darwin) iQCVAwUBQxVOnP5AbZRALNr/AQHiswP+JVzICPmnNCHb5rJ6fgvfs7KgwAoQlU0A dLpkFy/FRYFA/abVSxr/vV2nlKMVq45SS/bHtma07/VZFIXOCvxi70Q5tP/11Lur 82vgtdoh5IjFfbewAQKuQ2ALpkea4ZbGoYfTo7Ql2m0uNwk8zMf5MSgqP+SS/3qK 4fh9/tDobcQ= =1K9/ -----END PGP SIGNATURE----- _______________________________________________ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
