Tracking down hosts inside your network

Devon True dtrue at mail.xodiax.com
Thu May 17 21:36:10 UTC 2001


All:

We are using NetFlow on our Cisco equipment and running Caida's cflowd
program to collect statistics. When I use the cflowd ARTS++ utility,
artsnets, I get the SrcAdr as a /24 or smaller (e.g. /23, /22, etc). Is there
anyway to get specific hosts (i.e. /32)? If not, anyone have any suggestions?
We are trying to track down an IP address that is sending a lot of traffic.

Please send replies off-list.

-----
Devon True




More information about the NANOG mailing list