Digging into IP Flow Records with a Visual Kernel Method

Cynthia Wagner, Gérard Wagener, Radu State, Thomas Engel

Abstract: This paper presents a network monitoring framework with an intuitive visualization engine. The framework leverages a kernel method with spatial and temporal aggregated IP flows for the off/online processing of Netflow records and full packet captures from ISP and honeypot input data and is operating on aggregated Netflow records and is supporting network management activities related to the anomaly and attack detection.