I am looking for an open source Machine Learning based tool to find anomalies, such as DDoS events that takes input in netflow format.
Any suggestions are appreciated. I am looking for some research based open source code that I can download and run on some remote machines containing netflow data files of an ISP.