NetFlow-Based Anomaly Traffic Analyzer

NetFlow provides I Pflow information in the network.Network administrators can use the NetFlow flow records for a variety of purposes,including accounting,billing,network planning,traffic engineering.In the field of network security,I Pflow information provided by NetFlow is used to analyze anomaly traffic.And NetFlow based anomaly traffic analysis is an appropriate supplement to current signature-based NIDS.In this paper,NetFlow-based Anomaly Traffic Analyzer,an anomaly-based intrusion detection system is discussed and proved to be effective.