Adam Powers Adam Powers RSS Feed

Black Friday, Cyber Monday, And The Digital Holiday Feeding Frenzy

The months of November and December, in particular Black Friday and Cyber Monday, can best be described as a digital feeding frenzy for consumers and cyber criminals alike. The pressure to buy can be overwhelming for many. With so much going on, it's easy to get caught up in the excitement and make simple mistakes that can cost you far more than you expected to spend. The holiday commotion around online commerce has attracted the attention of predators from Brazil to Moscow, and they are coming for your stocking stuffers. For the Employer: Your primary responsibility is education. Users will… READ MORE

NetFlow Coming to Microsoft’s Hyper-V Thanks to Cisco’s Nexus-1000v

I mentioned last week that VMware's vSphere 5.0 will be supporting NetFlow v5. Well according to this article from Cisco, Microsoft's Hyper-V technology will also soon support NetFlow via the Nexus 1000v. Good news indeed! Lancope has long touted the importance of flow-based monitoring in the virtual space. Flows provide an excellent mechanism for gaining visibility into the inner workings of the virtual environment. Citrix has Open vSwitch for NetFlow, VMware has its own native NetFlow v5 support (or Lancope's FlowSensor VE), and now Microsoft has flow support through the 1000v. So the bottom line: If you have Hyper-V and the… READ MORE
CATEGORIES Virtualization
TAGS

Huawei and the Chinese PLA: Can We Trust NetStream Flows?

Just read a disturbing article in the Washington Times regarding potential ties between Huawei and the Chinese military ("PLA"). The Pentagon is afraid that Huawei might be colluding with the Chinese military to add "back doors" to the software/hardware found in their routers and switches. The entire report can be found here. Huawei equipment generates "NetStream" flows. NetStream is a synonym for NetFlow. The record format and even the commands to enable NetStream are similar to that found in older versions of Cisco's IOS. They even call it "NDE" for "NetStream Data Exporter". Cisco uses the same term of "NDE"… READ MORE
CATEGORIES General Interest
TAGS

VMware: vSphere 5.0 Supports NetFlow v5

Just had this VMware blog entry forwarded to me. Looks like vSphere 5.0 will provide native support for NetFlow v5! Previous versions of VMware supported NetFlow but the feature was considered "experimental" and few VMware admins actually enabled it. The NetFlow support in vSphere 5.0 will be production quality and fully supported so we should see much broader enablement. This quick diagram from their blog post describes the process... So congrats to VMware for stepping up and adding full support for NetFlow. Unfortunately it's NetFlow v5 which means you won't get MAC addresses, latency stats, VM names, application information, HTTP… READ MORE
CATEGORIES Virtualization
TAGS

Measuring NetFlow Scalability: How Much is a Lot of Flows?

In the world of enterprise-class NetFlow collection, the key scalability factor is flows per second (fps). Flows per second is a measurement of how many NetFlow records the collector is receiving on a second by second basis. As a quick refresher, NetFlow is an IP accounting technology developed by Cisco in the late 90s. It's been refined and improved over the years and has become an integral part of network and security monitoring, especially in large distributed networks such as that found in the enterprise. Every time a packet travels through a NetFlow-capable device a flow is created in the… READ MORE
CATEGORIES StealthWatch
TAGS