Analyze Netflow

manager Sun, 04/07/2019 - 19:41

Convert pcap files to nfdump files with nfdump

NfSen is a graphical web based front end for the nfdump netflow tools.

Example nfdump format:

Date first seen          Event  XEvent Proto      Src IP Addr:Port          Dst IP Addr:Port     X-Src IP Addr:Port        X-Dst IP Addr:Port   In Byte Out Byte


NfSen allows you to:

  • Display your netflow data: Flows, Packets and Bytes using RRD (Round Robin Database).

  • Easily navigate through the netflow data.

  • Process the netflow data within the specified time span.

  • Create history as well as continuous profiles.

  • Set alerts, based on various conditions.

  • Write your own plugins to process netflow data on a regular interval.