North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Why do you use Netflow

  • From: Paul A. Bradford
  • Date: Tue Aug 19 16:38:01 2003

   On ciscos, we use it to track down DOS attacks in a put it on,
troubleshoot, take it off manner.  Works great on not Catalyst stuff... 
put it on.. wait 30 seconds look for anything with K packets and you've
got your bad guy, hopefully.


On Tue, 2003-08-19 at 15:55, [email protected] wrote:
> Are operators frequently using netflow nowadays?  I assume that if you are, you turn it on only for
> some limited duration to collect your data and then go back and do your analysis.  Is this assumption correct?
> What are you looking at when you analyze this data?  I've seen uses such as
> top 10 destination AS's for peering evaluations.  What else?  Billing?
> -Lance-
Paul A Bradford
Senior Network Engineer
Adelphia Cable Communications