CISCO SYSTEMS NETFLOW (FLOW-EXPORT)
Sawmill is a Cisco Systems NetFlow (flow-export) log analyzer (it also supports the 1021 other log formats listed to the left).
It can process log files
in Cisco Systems NetFlow (flow-export) format, and generate dynamic statistics from them,
analyzing and reporting events.
Sawmill can parse Cisco Systems NetFlow (flow-export) logs, import them into a MySQL, Microsoft SQL Server, or Oracle database (or its own built-in database),
aggregate them, and generate dynamically filtered reports, all through a web interface.
Sawmill can perform Cisco Systems NetFlow (flow-export) log analysis on any platform, including Windows, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and others.
Sawmill stores the following non-numerical fields in its database for Cisco Systems NetFlow (flow-export), generates reports for each field, and allows dynamic filtering on any combination of these fields:
| Field | | Internal Name |
|---|
| | date/time | | date_time |
| | location | | location |
Sawmill stores the following numerical fields in its database for Cisco Systems NetFlow (flow-export), aggregating them and including them as columns in most reports:
| Numerical Field | | Internal Name |
|---|
| | events | | events |
| | packets | | dpkts |
| | bytes | | doctets |
| | unique source IPs | | unique_source_ips |
See Sawmill Features to learn more about Sawmill's options for viewing, customizing, filtering, exporting and scheduling Cisco Systems NetFlow (flow-export) reports.
Sawmill also supports 1021 other log formats.
