Welcome to EHNT, the Extreme Happy Netflow ToolThe purpose of this EHNT (pronounced 'ent') is to get some useful information from netflow (version 5 only) without too much trouble. The typical EHNT user is a network administrator operating routers capable of exporting netflow packets.
Netflow operates in several modes. It will dump flow records in
human-readable form. It will also provide reports on top ASes,
IP protocols, and tcp/udp ports. The reports can be generated over various intervals, from 1 minute to 1 day.
|
Download(s) |
Screenshot(s)Here is EHNT's command-line help, followed by a dump in which only the first flow using port 443 was requested. (Some AS names/numbers have been removed to protect the stupid.) |