FlowScan A Network Traffic Reporting and Visualization Tool

1
FlowScanA Network Traffic Reporting and
Visualization Tool

• Dave Plonka
• plonka_at_doit.wisc.edu

2
Presentation Overview

• Introduction
• FlowScan's Functionality
• Hardware Software Components
• Sample Graphs
• Short Long Term Analyses, Events
• Graphs by Autonomous Systems, Top ASNs
• SubNetIO graphs
• References

3
Sample Flowsncftp GET session
4
Background on Flows Cisco NetFlow

• Diagram by Daniel W. McRobb, from the cflowd
  configuration documentation, 1998-1999.

5
FlowScan's Functionality
6
FlowScan HardwareComponents
7
Software
8
Short Term Analysis
9
(No Transcript)
10
CampusIOISP Traffic, 10-11 NOV 2000

• Graph by Alexander Kunz ltAlexander.Kunz_at_nextra.degt
  , 2000.

11
CampusIOUniversity of Wisconsin - Parkside10-11
Nov 2000

• Graph by Steven Premeau ltpremeau_at_uwp.edugt, 2000.

12
CampusIOLong Term Analysis550 days prior to 21
Sep 2000
13
CampusIO NapsterDaily AveragesMarch Through
September 2000
14
CampusIO EventsRedHat 6.2 Releasec. Wednesday
29 Mar 2000
15
CampusIO EventsRedHat 7 Release"Black" Monday,
25 Sep 2000
16
CampusIO Events"All in 2 day's work"Monday
Tuesday, 23-24 Oct 2000
17
CampusIO Events"All in 2 day's work"Monday
Tuesday, 23-24 Oct 2000
18
CampusIO ASNsUW-Madison PeersWednesday
Thursday, 1-2 Nov 2000
19
CampusIO ASNsTop Origin ASNs
20
CampusIO ASNsTop "Path" ASNs
21
SubNetIOWednesday Thursday, 1-2 Nov 2000
22
FlowScanA Network Traffic Reporting and
Visualization Tool

• http//net.doit.wisc.edu
• /plonka/FlowScan/