Using NetFlow to see user defined Application Groups in Scrutinizer

Posted in NetFlow, NetFlow Analyzer, Scrutinizer on January 4th, 2010 by scottr
using-netflow-to-see-user-defined-application-groups-in-scrutinizer

Since the release of the latest version of our NetFlow and sFlow analysis tool, I have been blogging about some of the new features that are available.

One of the new report features available gives you the ability to filter on conversations and show user defined applications that were involved in those conversations.

Read more »

Tags: , , , , , , , , ,

Using Cisco NetFlow to find Source and Destination ports

Posted in NetFlow, NetFlow Analyzer, Scrutinizer on October 22nd, 2009 by scottr
using-cisco-netflow-to-find-source-and-destination-ports

Let’s say that you are looking for information regarding network traffic taking place between company workstations and an application server; we’ll call it acmeapplication.com. You know that acmeapplication.com is using random port numbers to send downloads back to the workstations making the requests.

When using NetFlow analysis software to monitor network traffic, you may see lots of HTTP port 80 conversations with the assistance of the Conversations filter, but nothing showing the random ports used by acmeapplication.com, as demonstrated below.

Read more »

Tags: , , , , , ,