# Some questions and Netflow. **URL:** \ **Category:** Zeek\ **Created:** [January 30, 2006, 1:41pm UTC](https://community.zeek.org/t/some-questions-and-netflow/919 "2006-01-30T13:41:48Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Jean-Philippe\_Luigg2](https://avatars.discourse-cdn.com/v4/letter/j/aeb1de/32.png) [@Jean-Philippe\_Luigg2](https://community.zeek.org/u/Jean-Philippe_Luigg2)\ **Post date:** [January 30, 2006, 1:41pm UTC](https://community.zeek.org/t/some-questions-and-netflow/919/1 "2006-01-30T13:41:48Z")
Hello everybody. I've some questions... Do there's a GUI or something likes this in order to see the various alerts ? I saw there's perhaps "Brooery" but is it available ? A tool likes this is very valuable if we plan to install the IDS to people with a minimum of background with computers. I recently 'sacrified' an old laptop with an old distro and installed it with access to Internet (ssh input allowed) behind my gateway, some very easy login/password after i got a very nice IRC bot... What i now want to do is to raise up alerts if connections come from the inside. Sound likes a "nbad.bro" or something else likes this may be helpful ? We talked in the past of Netflow, the good concept used by "Cisco", how do you see working with it ? At least, two choices : - Using Bro as a Netflow concentrator. - Using a dedicated tool to capture the flows and then use "Bro" to inspect data. I work all the day with the "flow-tools" package from "OSU" but there are several others floating around and each one with different format. And what about the future things to come (the famous TODO) ? Thank you. Best regards. ---
**Author:** ![Christian\_Kreibich3](https://avatars.discourse-cdn.com/v4/letter/c/4af34b/32.png) [@Christian\_Kreibich3](https://community.zeek.org/u/Christian_Kreibich3)\ **Post date:** [January 30, 2006, 9:21pm UTC](https://community.zeek.org/t/some-questions-and-netflow/919/2 "2006-01-30T21:21:04Z")
Hi, > Hello everybody. > > I've some questions... > > Do there's a GUI or something likes this in order to see the various alerts ? > I saw there's perhaps "Brooery" but is it available ? > A tool likes this is very valuable if we plan to install the IDS to people > with a minimum of background with computers. the Brooery was an experimental prototype and not in shape for everyday use, sorry. > And what about the future things to come (the famous TODO) ? Papers, PhD theses, fame, startups, ... 🙂 Cheers, Christian. ---
**Author:** ![Jean-Philippe\_Luigg2](https://avatars.discourse-cdn.com/v4/letter/j/aeb1de/32.png) [@Jean-Philippe\_Luigg2](https://community.zeek.org/u/Jean-Philippe_Luigg2)\ **Post date:** [January 31, 2006, 1:52pm UTC](https://community.zeek.org/t/some-questions-and-netflow/919/3 "2006-01-31T13:52:16Z")
Hello, > the Brooery was an experimental prototype and not in shape for everyday > use, sorry. So it may be time to think to a tool... :-)) > \> And what about the future things to come (the famous TODO) ? > > Papers, PhD theses, fame, startups, ... 🙂 🙂 Why not ? Do there's informations about next releases and what they will bring up ? Best regards. ---
**Author:** ![robin](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/robin/32/599_2.png) [@robin](https://community.zeek.org/u/robin)\ **Post date:** [February 1, 2006, 12:44am UTC](https://community.zeek.org/t/some-questions-and-netflow/919/4 "2006-02-01T00:44:18Z")
Both approaches seem to be reasonable. There has been some discussion of integrating NetFlow into Bro for some time now but, as far as I'm aware of, nothing concrete has materialized yet. It's on our radar though and indeed part of a planned future project (with no concrete time schedule yet though). Robin ---
**Author:** ![Jean-Philippe\_Luigg2](https://avatars.discourse-cdn.com/v4/letter/j/aeb1de/32.png) [@Jean-Philippe\_Luigg2](https://community.zeek.org/u/Jean-Philippe_Luigg2)\ **Post date:** [February 8, 2006, 3:15pm UTC](https://community.zeek.org/t/some-questions-and-netflow/919/5 "2006-02-08T15:15:43Z")
I was on the discussion about the Netflow's feature in the past but you're right, nothing has materialized. So it may be time... Netflow technology is very used today both for network/security purposes so i'll think about this. Best regards. ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:37pm UTC](https://community.zeek.org/t/some-questions-and-netflow/919/6 "2022-05-06T15:37:46Z")
Closed on May 6, 2022, 3:37pm UTC