I am running some 120 computer behind my ASA.I discovered that there kight be a PC or more who is broadcasting the bad traffic.I don't have control on the PC's in inside network.Suggest me a freeware which can help me diagnose the infected node.Also let me know how to deploy it.
Try to use netflow. On the some router you can run show ip flow cache (configure netflow) or show mls (on Cat7600/6500). Please, let me know if you want to know more details.
Thanks Nejman.Kindly suggest me the link for netflow collector.I need to go like this.Enable netflow on gatway router and collect data behind the ASA(Natting here) in inside or dmz network.
Let me know about good netflow collector/analyzer.
there are many products on the market. I can recommend our software solution - Caligare Flow Inspector (more details: http://www.caligare.com/netflow/cfi.php ). On the URL http://netflow.caligare.com there is a list of competitors and their applications, so if you decide to test another application, you can use this list.) Please, feel free to contact me directly if you have any qustions... (my email is: nejman@caligare.com)
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
