A Passive Services Discovery Method Using NetFlow
Zhai Ji-qian · Harbin Ligong Daxue xuebao · 2014
learn about which servers are deployed in the organization network and who is scanning the network It network and security administrators. The novel service discovery method based on NetFlow is presented in this paper. The six heuristics are defined to reassemble unidirectional NetFlow flows into connection- oriented bidirectional flows,and then the three types of flow are analyzed to output,so the four types of endpoints are extracted from three types of flow. And these six heuristics on the flow dataset are evaluated on a large campus network,and the results of evaluation show that this approach provides a simple and efficient solution to gain visibility in organization networks.