Bill Yurcik schrieb:
Sebastian: take a look at CANINE (a netflows converter and anonymizer)
and let me know how it works for you,
download site:
<http://security.ncsa.uiuc.edu/distribution/CanineDownLoad.html>
Cheers! - Bill Yurcik/NCSA
On Thu, 9 Feb 2006, Sebastian Krieger wrote:
Hi,
I'm searching for a proper way to anonymise traffic by multiple
criteria. Maybe this is possible in conjunction with filters based on
ip-prefix and port. I already tried some things with flow-tools, but I
didn't find the result I need.
For example...
src-addr src-port dst-addr dst-port
192.168.1.10 2323 212.110.110.200 80
212.110.110.200 80 192.168.1.10 2323
to...
192.168.1.0 0 212.110.110.200 80
212.110.110.200 80 192.168.1.0 0
Hope that someone can help me!
Regards
Sebastian
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
Hi Bill,
I just tried canine but I am unable to load netflow data collected by
flow-tools. I tried it binary and also after a "flow-export -f 2".
Which format is suitable for canine?
Thanks
Sebastian
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
