[scg-sec] netflow collector

Jared Mauch jared at puck.nether.net
Fri Aug 13 14:59:19 EDT 2004


	Wendy has provided me some details regarding netflow
on cisco, they encode the type codes in the port numbers..

	Juniper doesn't seem to have the same behaviour, FYI..
don't know about others that generate netflow data ...

	- Jared

On Fri, Aug 13, 2004 at 02:18:38PM -0400, Jared Mauch wrote:
> 
> 	i have a compact netflow collector that would
> allow you to limit it to just icmp data it would store/process so you
> can perform analysis of it.. let me know if you are interested in a
> copy of the collector, it's a few short lines of C with a fair number
> of comments ... (~500 lines)
> 
> -- 
> Jared Mauch  | pgp key available via finger from jared at puck.nether.net
> clue++;      | http://puck.nether.net/~jared/  My statements are only mine.
> _______________________________________________
> scg-sec mailing list
> scg-sec at puck.nether.net
> https://puck.nether.net/mailman/listinfo/scg-sec

-- 
Jared Mauch  | pgp key available via finger from jared at puck.nether.net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.


More information about the scg-sec mailing list