Monitoring traffic with NetFlow and how Stealthwatch can help

Those packets can be sneaky! They will zip right by you while your back's turned. You need to See the Flow. Join us March 29 to learn about how you can keep an eye on your packets with NetFlow and Cisco's Stealthwatch.

Don't forget to print and use your Parking Pass


Ova will briefly cover the history of NetFlow and its origins as a bandwidth monitoring and billing tool. The conversation will cover open source NetFlow tools that you can use at home. We will then will move towards enterprise quality NetFlow tools using Cisco Stealthwatch. Many modern NetFlow tools are still being used for just basic network monitoring. Using Stealthwatch, we will discuss how NetFlow can be used for network operations, security operations, and incident response, but also advanced topics such as Network Behavior Anomaly Detection (NBAD).


Ova Bear, Cisco

Ova Bear is a Consulting Systems Engineer for Cisco Systems. Ova specializes in a NetFlow collection and anomaly detection tool called Stealthwatch that Cisco acquired as a result of the acquisition of Lancope in December of 2015. Ova has been working with and using NetFlow for nearly ten years. Prior to working at Cisco and Lancope, Ova worked at a large university for 11 years, the last 5 of which were as a part of the Network Security team where our primary tool for monitoring and securing the university network was powered by NetFlow. Ova can be found on Twitter @ovabear where he is likely tweeting about his dogs, tech, or sports


5:30 - 5:45: Registration and Networking

5:45 - 6:00: Sponsor

6:00 - 7:00: Discussion

7:15 - Room closes, After-Meeting Social

Please RSVP!!!

Please use this form to help us get an accurate count for food.

RSVP at:

Eventbrite - WMCUG Stealthwatch



Davenport University

6191 Kraft Ave SE

Caledonia, MI 49512

Sneden Hall Meeting Room 1/2/3 (Across from Auditorium)

Please remember to park in an E (Event) parking lot. We suggest section F, as identified on our Location page