FlowBAT is a graphical flow-based analysis tool. Utilizing the power and versatility of network flow records, FlowBAT can help provide visibility for network administrators and network security practitioners.

FlowBAT is written in Node.js using the Meteor framework. It is designed to work along side an existing SiLK-based NetFlow system, or to be installed in conjunction with one. FlowBAT was written with ease of installation and deployment in mind.

Whether you are a seasoned pro at using flow data or brand new to it, FlowBAT provides a user experience that should make it easy to rapidly track connections in to and out of your network. This includes 

• Investigating intrusion detection system alerts
  
• Tracking attacker activity through a network
  
• Troubleshooting network communication issues
  
• Learning more about the communication to/from devices on your network
  

Read on to learn more about installing, configuring, and using FlowBAT and network flow data...