GitHub

Impossible VLAN IDs reported when parsing netflow v10/ipfix records

I'm using your ipfix and netflow definitions in my personal environment under your repo's custom license. These are feeding in to the vanilla logstash netflow codec, not specifically elastiflow -- but ...
sei.cmu

SSH Compromise Detection Using NetFlow/IPFIX

In this presentation, the authors discuss IDS SSHCure, the first network-based IDS that detects whether an attack has resulted in a compromise. Dictionary attacks against SSH daemons are a common type ...
sei.cmu

Why Netflow Data Still Matters

Sarneso, E., 2016: Why Netflow Data Still Matters. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed November 2, 2025, https ...
IEEE

Adaptive NetFlow IIoT Intrusion Detection With Deep Transfer Learning, Genetic Optimization, and Ensemble Methods for Network Management

Abstract: The growing demands of Industry 5.0 necessitate resilient Internet of Things (IoT) networks, which are increasingly susceptible to sophisticated cyber threats. While advancements in ...
GitHub

amjadabu-mahfouz/Netflow_IDS

If cicflowmeter is installed using pip, you may get a type mismatch error; in which case you will need to go into the flows.py file in the cicflowmeter site-package ...
IEEE

Predicting Network Attacks with CNN by Constructing Images from NetFlow Data

Abstract: Intrusion detection is a pivotal step for network protection. Usually, intrusion detection is performed at packet level by using deep packet or state-full protocol inspection to detect ...