Network engineer Michael Lucas offers a detailed look at how network flow analysis can save companies time and money and make life in the office a lot more peaceful.
Michael W. Lucas is a network/security engineer and the author of the critically acclaimed Absolute FreeBSD (2007), Absolute OpenBSD (2003), Cisco Routers for the Desperate (2009), and PGP & GPG (2006), all from No Starch Press.
You know that servers have log files and performance measuring tools and that traditional network devices have LEDs that blink when a port does something. You may have tools that tell you how busy an interface is, but mostly a network device is a black box. Network Flow Analysis opens that black box, demonstrating how to use industry-standard software and your existing hardware to assess, analyze, and debug your network.
Unlike packet sniffers that require you to reproduce network problems in order to analyze them, flow analysis lets you turn back time as you analyze your network. You'll learn how to use open source software to build a flow-based network awareness system and how to use network analysis and auditing to address problems and improve network reliability. You'll also learn how to use a flow analysis system; collect flow records; view, filter, and report flows; present flow records graphically; and use flow records to proactively improve your network.
Network Flow Analysis will show you how to:
- Identify network, server, router, and firewall problems before they become critical
- Find defective and misconfigured software
- Quickly find virus-spewing machines, even if they’re on a different continent
- Determine whether your problem stems from the network or a server