6. Basic Reporting

In this section, we use the nfdump product, installed in the previous section, to query the collected data and answer some basic questions about network activity which we generate. This practice is fundamental to understanding what we can do with NetFlow, so don’t rush.

Let’s practice querying the recorded data using the nfdump tool. All similar tools should be able to produce much of the same, although there will be some large differences in user interface and user-friendliness for various tasks. As you do each item in the list, take a screenshot.