Analyzing user traffic flow

[IS34lyf]

Hello,

I currently have netflow configured in our network environment and I am able to see source/destination and ports etc. However, is there a way to figure out what it actually means?  I can only assume what is going on ( Source: user x is destination: 198.x.x.x port 8801 because "insert assumption") Is there something that would show an actual word for word information like user X is streaming video using zoom?

Also, is Netflow available on Layer 2 switches? From what I understand it was created for Routers.

Thank you!

[balaji.bandi]

You need to decouple the information, and know known ports - Netflow sends the information, your NMS system needs to give a readable dashboard for your management.

So look for an NMS which can give you the information you looking for.

Side note: it is very important where this Netflow information collected and exported to NMS.

[IS34lyf]

I am using PRTG at the moment. It is readable to some degree, however maybe I am asking for the impossible. Ill try to look at other NMS and see which fit my requirements.

[balaji.bandi]

PRTG is a good tool, in the industry - should be able to give you some level of visibility.