Re: Why do you use Netflow

[Paul A. Bradford]

Well,
   On ciscos, we use it to track down DOS attacks in a put it on,
troubleshoot, take it off manner.  Works great on not Catalyst stuff... 
put it on.. wait 30 seconds look for anything with K packets and you've
got your bad guy, hopefully.


Thanks,
Paul


On Tue, 2003-08-19 at 15:55, lance_tatman@agilent.com wrote:
> Are operators frequently using netflow nowadays?  I assume that if you are, you turn it on only for
> some limited duration to collect your data and then go back and do your analysis.  Is this assumption correct?
> 
> What are you looking at when you analyze this data?  I've seen uses such as
> top 10 destination AS's for peering evaluations.  What else?  Billing?
> 
> -Lance-
> 
> 
> 
>  
-- 
Paul A Bradford
Senior Network Engineer
Adelphia Cable Communications
814-274-6663