[c-nsp] Netflow/NBAR (was: 6500 under DDoS)

Fredrik.Jacobsson at enskilda.se Fredrik.Jacobsson at enskilda.se
Wed Jul 28 10:31:02 EDT 2004


> Netflow will be in the hardware path, but it's not going to give you 
> nearly the same amount of information as NBAR as it won't do any kind of 
> payload analysis.

Ok, thanks.
I'm primarily interested to monitor which type of traffic that
passes through the network aiding us to make decisions regarding
to our QoS policy/classifications. And for that I think we're 
fine with just the port and source/dest.

But perhaps someone out here can hint of a good and fairly simple
pc-application (Windows preferred but linux/solaris is fine too) that
can give out such info in a nice way, and being able to sort on
ports/subnets/packets/sizes and such?
(guess we can use Excel for that last thing if it creates importable data)

Best regards
/Fredrik Jacobsson



**********************************************************************************************************************
Confidentiality Notice

The content of this e-mail, including attachments, is intended for the confidential use of the individual(s) or entity(-ies) to whom it is addressed only and may contain personal and/or confidential information. Please notify the sender immediately by returning this e-mail if you are not the intended recipient. If you are not the intended recipient, you are hereby notified that you have received this communication in error and that reading, duplicating, or in any way disseminating its content to any other person, is strictly prohibited.

If the content of this e-mail, including attachments, includes an offer to provide any service or product, an offer or a solicitation of an offer to buy or sell any securities or any other investment product, please refer to the disclaimer on www.enskilda.se, which applies also to the content of this e-mail. Any such transaction will also be subject to any other Terms of Business currently in place between us.

If you are a client of Enskilda Securities with access to Enskilda Research Online and this e-mail contains a research report or the content of this e-mail, including attachments, may be regarded as an advice in relation to companies or securities, please refer to the general and company specific disclaimers, respectively, on Enskilda Research Online.
**********************************************************************************************************************






More information about the cisco-nsp mailing list