AW: flow -> web

tom tier1 at
Mon Feb 6 08:43:46 UTC 2006

If one does not wanna use netflow, but ipaccounting, then this is a also a
nice solution...

tom from munich/germany

-----Ursprüngliche Nachricht-----
Von: owner-nanog at [mailto:owner-nanog at] Im Auftrag von
Randy Bush
Gesendet: Montag, 6. Februar 2006 09:25
An: nanog at
Betreff: Re: flow -> web

folk have asked me to summarize.  so here it goes

"Justin M. Streiner" <streiner at> and Nicolas Strina
<nicolas.strina at> recommended the nfdump nfsen pair,

Chris Kuethe <chris.kuethe at> and Peter Wohlers <pedro at>
recommended ntop

Peter Wohlers <pedro at> also recommended Stager

Steven Rakick <stevenrakick at> recommended nSight

Tony Hacche <hacche at> recommended Crannog's NetFlow Tracker

Jared Mauch <jared at> has a tool to detect and highlight ddos
symptoms, but it does not have per-protocol sexy graphs.  looks very useful
for ddos detection, though


i am currently playing with nfsdump/nfsen


More information about the NANOG mailing list