Well, On ciscos, we use it to track down DOS attacks in a put it on, troubleshoot, take it off manner. Works great on not Catalyst stuff... put it on.. wait 30 seconds look for anything with K packets and you've got your bad guy, hopefully.
Thanks, Paul On Tue, 2003-08-19 at 15:55, [EMAIL PROTECTED] wrote: > Are operators frequently using netflow nowadays? I assume that if you are, you turn > it on only for > some limited duration to collect your data and then go back and do your analysis. > Is this assumption correct? > > What are you looking at when you analyze this data? I've seen uses such as > top 10 destination AS's for peering evaluations. What else? Billing? > > -Lance- > > > > -- Paul A Bradford Senior Network Engineer Adelphia Cable Communications 814-274-6663
