The stealthwatch sensor will provide flow information including application layer information like URL, etc. This information can be gleaned from Stealthwatch.
The current version (6.9) of Stealthwatch Flow Sensor exports data in IPFIX format.
The Stealthwatch Flow Sensor exports data in IPFIX format (see RFCs 7011, 7012). Any system that can consume IPFIX (or NetFlow or any of the compatible formats) should be able to consume it. Some of the datapoints encoded in the Flow Sensor's data are recorded in "enterprise fields". Those fields which are publicly labeled will use IANA standard IP Flow Information Export (IPFIX) Entities.
Comments
0 comments
Please sign in to leave a comment.