PLNOG 9: Pavel Minarik - Network Traffic & Security Monitoring in Examples

FlowMon is a network traffic monitoring and security solution that uses IP flows to provide visibility into network activity. It analyzes NetFlow and IPFIX data from probes and routers to detect security threats like DDoS attacks and malware as well as optimize network performance. The solution includes probes to collect data, collectors to store and analyze flows, and a monitoring center to provide visualizations, reports, and alerts. It can help network operators understand top users and applications, identify unwanted traffic and anomalies, fulfill data retention laws, and optimize infrastructure usage and peering relationships.