3

Security Applications of cflowd

---

Times, they are a'changing   4   Evolution of High-Performance Networks Introduces New Problems for Security Management   5   cflowd Enables Several Useful Traffic Monitoring Capabilities   6   Traffic Monitoring with cflowd   7   Background on cflowd (lifted from dwm@caida)   8   Cisco NetFlow Export Collected by cflowd (lifted from dwm@caida)   9   Centralized Collection Hierarchy (lifted from dwm@caida)   10   NetFlow Contains Some Very Useful Data (lifted from dwm@caida)   11

What can we do with the data?   12   Time-domain Aggregations Permit New Analyses   13   Link-layer Tracing with cflowd   14   Wrapping Up   15