What are popular ways to read and/or post-process NetFlow data?
Here are a few: • Use CAIDA’s cflowd, and its accompanying flowdump util • Use cflowd, and Dave Plonka’s Cflow.pm perl module: http://net.doit.wisc.edu/~plonka/Cflow/ which comes with a sample perl script called “flowdumper” which mimics flowdump, but shows you how to use the perl API to access the NetFlow flow fields. • Use the Ohio State University “flow-tools” package by Mark Fullmer, etc.
