Powerful Network Flow Analysis
Available directly from ProQueSys or from Dartware, LLC, as InterMapper Flows, IMFlows is ProQueSys's flagship product: a powerful, full-fidelity network flow analyzer developed specifically for security-concious network operators.
Unlike other network flow analysis tools, IMFlows preserves all flow records, allowing you to search network traffic after the fact; our highly-optimized NetSAW2-based flow correlation engine filters, sorts and searches flows in real time. This makes IMFlows the ideal starting point for any network forensic investigation, traffic troubleshooting, or capacity management task.
Real-Time Results
Flow data is a much more compact representation of network activity than full packet captures. This makes it possible for IMFlows to quickly measure and detect a number of network metrics. For instance, IMFlows can:
- show activity specific to a particular host or protocol,
- display traffic volumes for each QoS/ToS class,
- it can detect pairs of IP addresses with abnormally many connections,
- find strange TCP flag combinations,
- identify vertical and horizontal port scans,
- and much more.
IMFlows is fully IPv6 capable and accepts a large variety of flow formats, including CISCO Netflow v1/v5/v7/v9, IPFIX, cFlow, jFlow, and sFlow ® v2/v4/v5. And if you don't have a switch or router capable of exporting flows in any of these formats, you can use our free software flow exporter.
We encourage the use of a 64-bit system for maximum performance.
Available for the Windows, Mac OS, Linux, Solaris, and FreeBSD platforms.