Do you want to mo­nitor da­ta traf­fic wit­hin your net­work and you do not ha­ve ro­utes and switc­hes that sup­port pro­tocols NetF­low (IP­FIX or si­milar)?

Ne­ces­sa­ry to cont­rol traf­fic on the In­ternet, but ro­uters do not sup­port the abo­ve-men­ti­oned pro­tocols?

Is the­re a ne­ed to cont­rol IP traf­fic ver­si­ons 4 and 6 (IPv4 and IPv6)?

Sho­uld a net­work flow col­lector ha­ve an IP add­ress of a net­work of IPv6?

You can sol­ve such prob­lems using the fSo­nar  prog­ram and any NetF­low col­lector and a  cor­respon­ding ana­lysis sys­tem. 

The fSo­nar prog­ram is a net­work sen­sor of NetF­low. It scans the who­le or a spe­cifi­ed ty­pe of traf­fic pas­sing thro­ugh one or mo­re net­work in­terfa­ces of com­pu­ter run­ning un­der Win­dows (Mic­ro­soft), and ge­nera­tes a flow of da­ta in the for­mat of the NetF­low ver­si­on 5 or 9 on the net­work ac­ti­vity on the­se in­terfa­ces. NetF­low da­ta is sent to a com­pu­ter with a ins­tal­led NetF­low col­lector (any ma­nufac­tu­rer), with furt­her ana­lysis of net­work ac­ti­vity with the cor­respon­ding prog­ram.

If fSo­nar is used with NetF­low ver­si­on 5, you can use the Flan­sys sys­tem as a NetF­low col­lector and ana­lysis sys­tem.

If you ne­ed to use NetF­low ve­si­on 9, we re­com­mend to use Soft­PI Flow Col­lector. 

For whom is fSo­nar in­tended?

The fSo­nar  prog­ram can be used in lar­ge net­works for the ana­lysis of in­co­ming / out­go­ing net­work traf­fic, ser­vers and or­di­nary PCs, and ho­me users to ana­lyze traf­fic of your com­pu­ter. Com­pa­ni­es are using ro­uters with NetF­low or IP­FIX sen­sors can get in­forma­ti­on abo­ut the net­work traf­fic trans­mit­ted on­ly thro­ugh the­se ro­uters, but you can not get a comp­le­te pic­tu­re of net­work traf­fic wit­hin the LAN. It is this abi­lity may pro­vide fSo­nar .

Ana­lysis of net­work traf­fic on ho­me com­pu­ters can be use­ful, for examp­le, to de­tect ma­lici­ous net­work ac­ti­vity soft­wa­re (tro­jans, vi­ruses, etc.).

Fe­atu­res

fSo­nar works as a Win­dows ser­vi­ce.

fSo­nar sup­ports NetF­low ver­si­ons 5 and 9. 

NetF­low ver­si­on 9 con­ta­ins a lar­ge set of fi­elds. But not all of the­se fi­elds are ava­ilab­le for com­pu­ters run­ning Win­dows. Of tho­se fi­elds that are ava­ilab­le, the user of fSo­nar can cho­ose on­ly ne­ces­sa­ry fi­elds for him at the mo­ment, which will re­duce the lo­ad on the CPU for da­ta pro­ces­sing and re­duce costs of net­work traf­fic in NetF­low da­ta trans­fer.

You can con­fi­gure fSo­nar to get NetF­low da­ta from a spe­cific net­work in­terfa­ce as well as to col­lect in­forma­ti­on on­ly on in­co­ming or out­go­ing traf­fic. In ad­di­ti­on you can con­fi­gure the prog­ram to mo­nitor a net­work traf­fic:

• on spe­cific IP add­ress;
• on spe­cific ran­ge of IP add­res­ses;
• on spe­cific IP port;
• exc­lu­ding from mo­nito­ring spe­cific IP ports or add­res­ses;
• and etc.

fSo­nar 1.5 not on­ly al­lows you to se­lect the ne­ces­sa­ry fi­elds for ex­port, and sa­ve them as a temp­la­te that can be used la­ter on the sa­me com­pu­ter or for qu­ick ins­tal­la­ti­on on ot­her com­pu­ters.

fSo­nar 1.5 can work in net­works with IPv4 and IPv6. 

The prog­ram do­es not con­su­me sig­ni­ficant sys­tem re­so­ur­ces, even at high lo­ad of net­work in­terfa­ces.

Down­lo­ad

Do­cumen­ta­ti­on and a tri­al ver­si­on of fSo­nar are ava­ilab­le in the si­te.

Ple­ase re­gis­ter on the si­te to down­lo­ad tri­al ver­si­on.

How to buy?

Le­arn he­re.