Netflow

Basics:

• netflow
• netflow v9 netflow_v9

Tools:

• Freeware NetFlow Software
• nfsen

Possible targets to implement:

• next AS, For accounting of public peering points (as TIX, SwissIX) where macaccount won't work (Hrdware switched plattforms as Cisco 76xx)
• per Destination-/Source-IP-Address for aoounting per Destination-/Soucce-IP-Address (multiple Hosts behind a transparent / NAT-Firewall)
• per Port for Traffic monitoring (Protocol: ipv4,ipv6,icmp,udp,tcp,ipsec, …) (Port: ssh,telnet,ftp, mail,http[s],domain,…)