CISCO SYSTEMS NETFLOW (NFDUMP -O LONG)
Sawmill is a Cisco Systems NetFlow (nfdump -o long) log analyzer (it also supports the 980 other log formats listed to the left).
It can process log files
in Cisco Systems NetFlow (nfdump -o long) format, and generate dynamic statistics from them,
analyzing and reporting events.
Sawmill can parse Cisco Systems NetFlow (nfdump -o long) logs, import them into a MySQL, Microsoft SQL Server, or Oracle database (or its own built-in database),
aggregate them, and generate dynamically filtered reports, all through a web interface.
Sawmill can perform Cisco Systems NetFlow (nfdump -o long) log analysis on any platform, including Window, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and others.
Sawmill stores the following non-numerical fields in its database for Cisco Systems NetFlow (nfdump -o long), generates reports for each field, and allows dynamic filtering on any combination of these fields:
|Field|| ||Internal Name|
| ||date/time|| ||date_time|
| ||day of week|| ||day_of_week|
| ||hour of day|| ||hour_of_day|
| ||protocol|| ||proto|
| ||source IP address|| ||src_ip_addr|
| ||source port|| ||src_port|
| ||destination IP address|| ||dst_ip_addr|
| ||destination port|| ||dst_port|
Sawmill stores the following numerical fields in its database for Cisco Systems NetFlow (nfdump -o long), aggregating them and including them as columns in most reports:
|Numerical Field|| ||Internal Name|
| ||events|| ||events|
| ||bytes|| ||bytes|
| ||duration|| ||duration|
| ||packets|| ||packets|
| ||flows|| ||flows|
See Sawmill Features to learn more about Sawmill's options for viewing, customizing, filtering, exporting and scheduling Cisco Systems NetFlow (nfdump -o long) reports.
Sawmill also supports 980 other log formats.