Re: [Nfsen-discuss] nfsen snapshot 20060325
Netflow visualisation and investigation tool
Brought to you by:
phaag
|
From: Jean-Philippe L. <jp....@fr...> - 2006-03-24 15:37:39
|
Hello Peter, > This first snapshot includes the ability to add/remove netflow > sources. This required a major change in the internal setup > for the RRD DBs. Old to new style conversion is done while > installing the snapshot, but can take several minutes, depending on > the number of sources and profiles. > When adding/deleting netflow sources in nfsen.conf run > /path/to/bin/nfsen reconfig > This will properly add/delete the sources. Sound likes good ! This is a feature i like to have. Beside of this, what's about the next way "PortTracker" will use ? Today, i can't afford (at home) using it because of the scheme used (creating all these RRDs give me some "file system full" :-) ). My next idea is about securities features, i used Netflow's technology for some years and hopefully, it helped me a lot during some periods (Sasser for example). How about adding a tool ables to detect in nfdump's output, portscans, etc. ? > Have a nice weekend You too. Best regards. |