Posted November 18, 2008 - 9:05 am
What are you doing with your traffic flow logs, such as NetFlow? How long does it normally take you to understand what exactly the log entries represent? What if you could generate a visual representation of the machines communicating on your network? Would that make your analysis work easier?