The OSU flow-tools package and cisco NetFlow logs

Proceedings of the 14th Conference on Systems Administration, LISA 2000

Volumn , Issue , 2000, Pages 291-303

  Fullmer, Mark ^a   Romig, Steve ^b  

^a OARnet ^*

^b OHIO STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ENTERPRISE NETWORKING; GENERAL NETWORKS; INCIDENT RESPONSE; NETFLOWS; NETWORK TRAFFIC; OHIO STATE UNIVERSITY; PERFORMANCE MONITORING; SECURITY FUNCTIONS;

INTRUSION DETECTION;

EID: 84941149577     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (18)

1. Bullard, Carter , Audit Record Generation and Utilization System (Argus), ftp://ftp.andrew.cmu.edu/pub/argus.
2. Cisco, Cisco Netflow Flowcollector, http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/nfc.
3. Cisco, Netflow services and applications white paper, http://www.cisco.com/warp/public/cc/pd/iosw/ioft/neflct/tech/napps-wp.htm.
4. Schales, Douglas Lee, David R. Safford, and David K. Hess, "The TAMUSecurity Package: An Ongoing Response to Internet Intruders in an Academic Environment," Proceedings of Fourth USENIX UNIX Security Conference, anon ftp at coast.cs.purdue.eduin/pub/tools/unix/logutils/netlog, 1993.
5. Brumley, David , Argus Export Scripts, contact Dave by email for copies.
6. Brumley, David , How to detect network scans, http://www.theorygroup.com/Theory/scans.html.
7. Lidz, E. Larry , flowextract, http://security.uchicago.edu/tools/netforensics.
8. Hobbit , netcat, http://www.l0pht.com/weld/netcat.
9. Assor, Mowgli , Security and Incident Tracking And Response (Sitar), http://www.net.ohio-state.edu/software/sitar.shtml.
10. Gailly, J-L. and P. Deutsch, Zlib compressed data format specification version 3.3, http://www.ietf.org/rfc/rfc1950.txt.
11. Leinen, Simon , Flow based monitoring and analysis, http://www.switch.ch/tf-tant/floma.
12. The CAIDA Web Site, cflowd: Traffic Flow Analysis Tool, http://www.caida.org/tools/measurement/cflowd.
13. Statscout, Statscount network performance monitor, http://www.statscout.com.
14. Rand, Dave and Tobias Oetiker , Mrtg: Multi Router Traffic Grapher, http://mrtg.hdl.com/mrtg.html.
15. Leres, Craig, Van Jacobson, and Steven McCanne, The tcpdump software package, anon ftp from coast.cs.purdue.eduin/pub/tools/unix/tcpdump.
16. Various, The Caida Web Site, http://www.caida.org.
17. Zhang, Yin and Vern Paxson, "Detecting Backdoors," Proceedings of Ninth USENIX Security Symposium, 2000.
18. Zhang, Yin and Vern Paxson, "Detecting stepping stones," Proceedings of Ninth USENIX Security Symposium, 2000.