Zeek in Action, Video 14, Comparing Zeek Connection Logs with NetFlow Records
What's the difference between Zeek connection logs and NetFlow records? This video takes a look. In what is likely to be one piece of a multi-part video, this segment differentiates between the creation of Zeek transaction logs and NetFlow records. It explains the difference between a NSM sensor and a NetFlow probe / collector / viewer architecture. Viewers will learn how to set up their own NetFlow infrastructure using open source tools. Stay tuned for a likely part 2 that spends more time on the logs themselves.