[22534] in North American Network Operators' Group
Re: Net Flows and Analysis tools
daemon@ATHENA.MIT.EDU (Pete Kruckenberg)
Sun Jan 10 20:10:54 1999
Date: Sun, 10 Jan 1999 17:50:34 -0700 (MST)
From: Pete Kruckenberg <pete@kruckenberg.com>
To: nanog@merit.edu
In-Reply-To: <Pine.BSF.4.05.9901101504420.17049-100000@iago.nac.net>
On Sun, 10 Jan 1999 alex@nac.net wrote:
> I am looking for some real-time net flow and analysis tools.
>
> If anyone has any pointers, I'd appreciate it.
>
> Something like Cisco Netflow, but that doesn't require a Cisco Router
> to capture (ie, a Unix box with promiscuous ethernets instead).
One that seems to be pretty good is Network Flight Recorder (
http://www.nfr.com ). This can run on an affordable Intel or Sparc box,
and for internal private use, it's free (and somewhat limited in speed).
There are also some (free) modules for it at loPht ( http://www.L0pht.com
-- make sure you get L"zero"pht.com, or you'll get a nice surprise).
NFR is a general-purpose platform for network analysis and reporting, but
it seems that right now it is most well-known for security analysis and
detection. The cool thing about it is that you can write your own modules
(that's one of the intents of the samples at L0pht.com).
Pete Kruckenberg
http://pete.kruckenberg.com/resume
