NetFlow Analyzer FAQs

Question 1

Is NetFlow Analyzer self-hosted and secure?

Accepted Answer

Yes, it is fully self-hosted, running on your Linux server using Docker Compose. Secure remote access for Claude.ai integration is provided via Cloudflare Tunnel, ensuring your network data remains private and controlled.

Question 2

What Meraki devices are supported?

Accepted Answer

This tool is specifically designed to collect and analyze NetFlow v9 data exported from Meraki MX firewall/router devices.

Question 3

What kind of network insights can I get?

Accepted Answer

You can get broad network deep dives (top talkers, destinations, countries, anomalies), detailed host profiles, detect C2 beaconing, compare current traffic to baselines, get GeoIP context for IPs, and drill down into raw flow data.

Question 4

What is NetFlow Analyzer?

Accepted Answer

NetFlow Analyzer is a self-hosted NetFlow v9 collector designed for Meraki MX devices. It enriches traffic data with GeoIP information and provides natural language network analysis capabilities via Claude.ai.

Question 5

How does NetFlow Analyzer leverage AI?

Accepted Answer

It integrates with Claude.ai through the Model Context Protocol (MCP), exposing powerful analysis tools. This allows users to ask Claude.ai natural language questions about their network traffic to gain insights, detect anomalies, and identify threats.

NetFlow Analyzer

NetFlow Analyzer

主要功能

使用案例

主要功能

使用案例