Netflow Example (cont).

• What’s missing?
  (Why are the flows only in 1 direction?)
  
• How do you fix it ?
• Now repeat the BCP38 packet spoofing exercise, but track the bogus packets with Netflow. Pay attention to what happens when uRPF is enabled.

Previous slide

Next slide

Back to first slide

View graphic version