Re: flow -> web

• Previous message: Martin Hannigan: "Re: So -- what did happen to Panix?"
• Maybe in reply to: Randy Bush: "flow -> web"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

folk have asked me to summarize. so here it goes

"Justin M. Streiner" <> and Nicolas Strina
<> recommended the nfdump nfsen pair,

    http://nfsen.sourceforge.net
    http://nfdump.sourceforge.net

Chris Kuethe <> and Peter Wohlers
<> recommended ntop

    http://www.ntop.org/

Peter Wohlers <> also recommended Stager

    http://software.uninett.no/stager/?page=docs

Steven Rakick <> recommended nSight

    http://www.obtuse.net/software/nsight

Tony Hacche <> recommended Crannog's NetFlow
Tracker

    http://www.crannog-software.com/index.php?go=Product.ShowDetail&ProductID=1

Jared Mauch <> has a tool to detect and
highlight ddos symptoms, but it does not have per-protocol sexy
graphs. looks very useful for ddos detection, though

---
i am currently playing with nfsdump/nfsen
randy

• Previous message: Martin Hannigan: "Re: So -- what did happen to Panix?"
• Maybe in reply to: Randy Bush: "flow -> web"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]