To calculate the overall star rating and percentage breakdown by star, we don’t use a simple average. Instead, our system considers things like how recent a review is and if the reviewer bought the item on Amazon. It also analyses reviews to verify trustworthiness.
Suprisingly lacking in dryness considering the subject matter. Author is a cunsummate smart-arse, highly conversant in the subject matter and often dropping interesting related facts, all the while flaunting a cocky sense of humor. A line in the first paragraph sums up the book:
"Network administrators all share an abiding and passionate desire for one thing: We want our users to shut up."
The guy backs his bark with bite. I feel he makes the reader feel like a plains indian if netflow were a buffalo. He will show you specifically how to go about setting up a netflow collector, how to install analysis tools, how to use them to determine all sorts of stuff, to how to use gnuplot to graph it. It covers host-level to bgp. I didn't know port numbers were used a different way for ICMP netflow packets, or that netflow v7 is actually useful for routers.
That said, the point of publishing is 2 years ago and I don't know how dated the material is. The author refers to very specific versions of software, which may have been perfectly useful on the day of publishing. That said, netflow itself does not change much (until IPFIX and IP6 roll out).
Oh, and this review is for the Kindle version. Somewhat perversely, I chose to run this entire book through text to speech while driving. While it was painful to hear a robotic man read out a full page of 5-tuple data, it worked out. Kudos to the publisher for not disabling text to speech.
5.0 out of 5 starsVery practical guide to a confusing topic
Reviewed in the United States on 1 August 2012
Verified Purchase
Short version: Buy this book if you need to deploy Netflow and you're willing to scrap and fight a little to make it happen. Probably saved me a month of dorking around in forums.
Long version. Netflow and sflow are a bit esoteric for most network admins I know; this book clears up most all the confusion with Netflow, doesn't talk much about sflow. I believe the confusion is a combination of most companies not needing Netflow/sflow, and the tangled wreck the solutions are in. Michael Lucas (ML)'s book untangles a lot of this. Personally when I bought it I was a CCIE with 12 years of experience and I had only a vague notion of how to set up netflow, mostly from the router perspective. Some interesting things ML clears up:
- Netflow isn't Cisco proprietary anymore. - The industry seems to be moving toward a post-netflow, post-sflow standard. Slowly. - You can get plenty of actionable information from Netflow without a GUI or any graphs. - There are about a dozen or more permutations of free software you can use, he recommends the best and guides you to setting them up. - You have to string multiple programs together, each with its own abilities, syntax and quirks.
Really, if you're going to deploy Netflow on your own, meaning without specialist consultants or a vendor blackbox solution, buy this book. I bought it and had a working Netflow collector within weeks, and like I said above, I didn't know Netflow from Miracle Grow before.
3.0 out of 5 starsGood but in some point the tools are difficult to implement
Reviewed in the United States on 17 December 2012
Verified Purchase
I have found this book interesting and detailed to some extent, I think the idea of using open source tools to do network analysis is good idea, however I got stuck in the perl section where one of the key tools of the book is needed to continue making progress, in this case the author limits to give some tips about how to install or force install on this key "module", however if one fails he remits you to the flow-tool list, which I have found to be slow in terms of response, and finally have left me "stuck" in one of the chapters avoiding me to continue making progress on the book itself. I know is not the author responsability validate or respond for the tools he recommends, but here this is a show stopper for the book itself, maybe some disk or more friedly help on line tool or KB run by the author followers will help ease this problem (or some basic Unix tips to set up environment variables, etc.... or discuss some common errors...).
I think in general this is a good book to understand flow technology but consider the open tools issues a big warning about having success on using practically this book and be warned that if you want to approach to this book in an useful manner you have to be ready to face some Unix and languages compiling challenges to complete the approach
5.0 out of 5 starsInteresting to the point information on flow analysis
Reviewed in the United States on 14 May 2018
Verified Purchase
Interesting read. Easy to understand. Concise . Good information for any network / security engineer / consultant Examples were clearly explained and concepts were made more accessible to the reader