• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Netflow Analyzer

C

cb9fl

Limp Gawd
Joined
Jan 2, 2006
Messages
456
I've started using ManageEngine's Netflow Analyzer 5. Great product so far but I'd like to ask a few questions.

Does anyone know of a F/OSS app with the same or better functionality than this program?

I need a better way to run accounting and auditing for internet based traffic. Netflow allows me to track IP Conversations between specific time periods but the interface seems a little clunky in that area.
 
You probably need a web proxy.
I use the iPrism from St. Bernard.

Point all you clients to it and block port 80 on your edge device only allowing the proxy access out.
 
All the clients go through a Cisco IOS router which includes Netflow. I can view stats on everything as is I just want a better reporting program.
 
I use Crannog Software's Netflow Tracker , and have nothing but great things to say about it. Had it over a year, not one problem, very easy to config and setup. (no, I don't work for them, just a happy customer). It isn't free, but they do have a free 24-hr demo you can download and test out to see if you like it.
 
I just installed the demo of Netflow Tracker.

Can you tell me how I would pull a report showing IP conversations timestamped?
 
If you high-light an area of traffic, right-click, go to the direction you want, pick 'Session Reports' and then 'conversations' that will show you what you want.
 
Ok I've done that. I was trying to see if each line could be tagged with the date and time.
 
We use a sonicwall 2040 Pro with enhanced firmware and the viewpoint software. Very powerful reporting.
 
Netflow Tracker seems to be an excellent product, unfortunately I will never get $10,000 approved.

Does anyone know of a comparable F/OSS alternative to a product like Netflow Tracker?
 
You can load flow data into ntop, I believe. I've never done it because I don't have any devices capable of generating flows ... but try it out.
I've used it on my home firewall / router for some time, and it generates quite detailed reports and statistics.

http://www.ntop.org/overview.html said:
What ntop can do for me?

  • Sort network traffic according to many protocols
  • Show network traffic sorted according to various criteria
  • Display traffic statistics
  • Store on disk persistent traffic statistics in RRD format
  • Identify the indentity (e.g. email address) of computer users
  • Passively (i.e. withou sending probe packets) identify the host OS
  • Show IP traffic distribution among the various protocols
  • Analyse IP traffic and sort it according to the source/destination
  • Display IP Traffic Subnet matrix (who's talking to who?)
  • Report IP protocol usage sorted by protocol type
  • Act as a NetFlow/sFlow collector for flows generated by routers (e.g. Cisco and Juniper) or switches (e.g. Foundry Networks)
  • Produce RMON-like network traffic statistics
Click to expand...
 
You must log in or register to reply here.
Back
Top