NetFlow
Web Applications compromise detection using Flow Data
Our previous article discusses flow-based SSH compromise detection. A force attack against SSH hosts consists of scan, brute-force and compromise phases that can be...
SSH Compromise Detection Using Flow Data
Secure Shell (SSH) provides a secure channel over an unsecured network in a client-server model. SSH is typically used to log into a remote...
DNS Amplification Attacks Detection with NetFlow or sFlow
The Internet we know nowadays cannot properly operate without using the Domain Name System (DNS). DNS syncs up domain names with IP addresses so...
The Difference between SNMP and NetFlow. Why should I use both?
Simple Network Management Protocol (SNMP) is a well-known standardized application layer protocol, originally developed for network management but mostly used for network monitoring. SNMP...
Automatic versus Manual NetFlow Deduplication
Duplication of NetFlow occurs when the NetFlow records about the same flow are exported multiple times to a NetFlow collector. In turn, the volume...
Exporting Flow to multiple servers (Flow Samplicators)
In our previous article we have discussed the alternative way to get flow statistics using a NetFlow generator. One of the fundamental features of...
NetFlow Generators explained
What is a NetFlow Generator?
A NetFlow generator is a dedicated network appliance or software running on a PC and listening on a single or...
Configuring NetFlow on VyOS and Huawei Network Devices
This is the second part of the post dedicated to NetFlow configuration. In the first part, we’ve discussed the configuration of Flexible NetFlow on...
Configuring Cisco Flexible NetFlow and Juniper j-Flow v8
One of our recent blog posts dedicated to NetFlow technology provides the necessary knowledge needed to understand NetFlow principles and what it is used...
The accuracy and overhead of flow sampling. To use or not to use flow sampling?
Flow-based (NetFlow, IPFIX, NetStream) and packet-based (sFlow) network monitoring technologies enable network administrators to gain insight into traffic traversing a network. They provide various...
