Nfsight is a Netflow processing and visualization application designed to offer a comprehensive network awareness solution. It is developed as a Nfsen plugin to construct bidirectional flows out of the unidirectional netflow flows. Nfsight leverages these bidirectional flows to provide client/server identification and intrusion detection capabilities.
Query to visualize server activity:
Netbios scanning activity from a single host:
Distributed SSH attack: