Thanks to the great IOShints blog for pointing me to NetFlow Performance Analysis. If you have any questions regarding the impact of generating NetFlow records on your routers, check out this Cisco white paper.
Subscribe to:
Post Comments (Atom)
Blogging Since 8 Jan 2003
About Me
twitter.com/taosecurity
Practice of NSM Pre-Orders
Save 30% With Code NSM101
Network Security Monitoring 101
Two sessions, 27-28 and 29-30 July at Black Hat USA in Las Vegas
Bejtlich on PBS Newshour
Watch My Most Recent TV Interview
Books by Richard Bejtlich
Detect and respond to intrusions using tools and techniques that work. Plenty of free excerpts online.
Association of Former Information Warriors
Former and current uniformed military only.
Digital Forensics Magazine
BSD Magazine
Blog Archive
Labels
- afcert (31)
- Air Force (18)
- aix (1)
- analysis (1)
- announcement (2)
- appsec (4)
- apt (56)
- attribution (4)
- bestbook (7)
- blackhat (29)
- books (4)
- breakers (4)
- bro (6)
- bruins (1)
- business (24)
- ccna (6)
- certification (26)
- china (82)
- cisco (30)
- cissp (7)
- cloud (4)
- clowns (12)
- commodore (6)
- conferences (34)
- controls (5)
- correlation (5)
- counterintelligence (18)
- crime (13)
- cybercommand (3)
- cyberwar (21)
- dan geer (1)
- databases (1)
- detection (16)
- dfm (1)
- disasters (10)
- dns (1)
- dod (7)
- education (8)
- engineering (11)
- exploits (15)
- favorites (261)
- feds (17)
- finance (2)
- fisma (21)
- forensics (6)
- fraud (2)
- freebsd (434)
- GE (11)
- ge-cirt (2)
- hakin9 (11)
- hardware (20)
- history (2)
- impressions (18)
- incidents (35)
- information warfare (1)
- infrastructure (1)
- insiders (10)
- insurance (2)
- interviews (5)
- ips (9)
- ipv6 (61)
- ir (16)
- law (19)
- leadership (2)
- linux (15)
- malware (15)
- mandiant (6)
- metasploit (5)
- metrics (2)
- microsoft (31)
- mssp (1)
- net optics (14)
- network (5)
- novasec (3)
- nsm (308)
- offense (19)
- oisf (2)
- open source (1)
- openpacket (12)
- packetstash (1)
- philosophy (73)
- pirates (5)
- powerpoint (4)
- pre-review (51)
- predictions (3)
- press (10)
- psirt (5)
- reading (12)
- redteam (3)
- regulations (1)
- reports (6)
- research (1)
- reviews (246)
- risk (13)
- roi (14)
- routing (1)
- russia (1)
- sans (34)
- scada (1)
- sec (1)
- sguil (189)
- snorby (1)
- snort (51)
- Snort Report (22)
- solaris (2)
- spying (3)
- standards (8)
- sysadmin (16)
- threat model (11)
- threats (97)
- tools (43)
- Traffic Talk (10)
- training (50)
- TTP (9)
- tufte (8)
- tv (1)
- ubuntu (5)
- usenix (1)
- verizon (5)
- virtualization (32)
- vulnerabilities (36)
- warranties (1)
- wisdom (13)
- writing (43)
Blogshares
4 comments:
Richard,
Have you run across anything comparable for the various *BSD netflow mechanisms (pfflowd, netgraph, etc.) In particular how enabling netflow impacts forwarding, packet filtering performance?
Matt,
Negative -- would make a good project.
Does anyone know of a similar document for sFlow ?
Post a Comment