[37607] in North American Network Operators' Group
Tracking down hosts inside your network
daemon@ATHENA.MIT.EDU (Devon True)
Thu May 17 17:38:25 2001
content-class: urn:content-classes:message
Date: Thu, 17 May 2001 17:36:10 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Message-ID: <316E961C9CE6CA45B70DDF2738D78E4205893B@mail.xodiax.org>
From: "Devon True" <dtrue@mail.xodiax.com>
To: <nanog@merit.edu>
Errors-To: owner-nanog-outgoing@merit.edu
All:
We are using NetFlow on our Cisco equipment and running Caida's cflowd
program to collect statistics. When I use the cflowd ARTS++ utility,
artsnets, I get the SrcAdr as a /24 or smaller (e.g. /23, /22, etc). Is =
there
anyway to get specific hosts (i.e. /32)? If not, anyone have any =
suggestions?
We are trying to track down an IP address that is sending a lot of =
traffic.
Please send replies off-list.
-----
Devon True
