Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 8 down vote favorite
4

I have been using FlowMatrix. What do others do on the cheap?

share|improve this question
I was thinking more of tools to analyze netflow traffic, I guess saying "network flows" made the question ambiguous. – Tate Hansen Nov 14 '10 at 18:05

4 Answers

up vote 3 down vote accepted

OSSIM has an Anomalies tab that uses Ntop and can be configured with similar data.

When I did this stuff in the past, I used Ourmon.

share|improve this answer
up vote 5 down vote

WireShark is a free tool you can use to monitor network traffic. Excellent tool to see if a hidden keylogger is trying to email and /or FTP logs because it usually has the address and password in the wireshark log.

share|improve this answer
Given that the logs are not encrypted. – Olivier Lalonde Nov 12 '10 at 22:09
up vote 3 down vote

I just saw a talk at Shmoocon about the YaF and SiLK tools that looked really good. YaF is a flow collector (which can collect other interesting data as well), and SiLK is an analysis package for them. There's even a nice GUI called iSiLK.

share|improve this answer
up vote 0 down vote

Here is a list of a 100 or so Network Security Tools that may be useful.

share|improve this answer
-1 The OP is looking for a specific type of network security tool. Not just a general list. If you really feel this adds to the discussion, why not add this to your previous answer? – Josh Brower Jan 30 '11 at 23:55

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.