Re: [Nfsen-discuss] Adding security intelligence to NFsen (netflow based IDS)

[Kiss G. [Bitman] <ki...@ss...>]

On Thu, 3 Aug 2006, Tristan RHODES wrote:

> We use a tool called "FlowTools" that was created by some local people
> that analyzes netflow data and tries to identify security violations.

> We have found that this tool is the most common way we identify problem
> machines.  We still use NFsen after we have discovered the incident,
> which NFsen is very useful for.
>
> Is there any interest or progress being made to add a similar
> functionality to Nfsen?  I have talked to the creator and he is willing

Actually I work on some similar enhancement of Nfsen.
Yes, I join this project if possible.

Gabor