Netfiow Based Flow Analysis and Monitor

In this paper, a flow analysis and monitor system based on Netflow is introduced. The system builds on Brower-Server framework, aims at enterprise scene. Data collecting and display are separated into two modules, makes it clearly demarcated and easy to deploy. Data collecting module receives and analyses Netflow-exported packets, insert per flow traffic information into Oracle database. Display module acts as a J2EE web server, fetches real-time or history traffic information from database and shows to web users. A real-time abnormal flow monitor module is embedded in the system to detect worm and other malicious attacks.