This is a little program which will process netflow packets from a network device and show the traffic stats based on ip address and source / destination of the traffic. The purpose of this application is simple. To find out how much bandwidth various devices are using on a network. It great for locating computers which may have malware or just very heavy users on them.
Main Features so far
- Provide a list of hosts matching a mask
- Provide source / destination / total counts for packets / bytes / flows
Work with
- Netflow version 5 protocol
- Any router / device or system that generate's cisco netflow packets.
Requirments
Current Version
Previous Versions
Example Router config (Cisco 877)
interface Vlan1
ip flow ingress
ip flow egress
ip flow-export source Vlan1
ip flow-export version 5
ip flow-export destination 192.168.0.50 5000
The above assumes you are using the interface vlan 1 and the netflow application will be running on the computer 192.168.0.50 and listening on port 5000
Screenshot's
Change Log - 2011-04-07
- Fixed A Problem with the installer