The main concern for adopting the tools is to analyze the defense against security threat on the network in monitor.

Hello Shoaib,

Thanks for the follow up.

The fact is I's looking for suggestion on tools used for monitoring network attacks and where I can apply STRIDE-like threat models.

Wireshark is a good tool for monitoring data based on different protocol and monitoring the transmission characteristics. However, I didnt find it useful for monitoring the treats/attacks on security hole. At the same time, I stumbled on suggestion to use Observium and somewhere it's turned not proper to export found reports. However, I'm looking for something alternative to Big Tap and sFlow that is more convenient for SDN switches.

I believe I'm clear from my POV.

Regards, 

Hi Asma,

Did you checked NetFlow or you can make your own Network Monitoring tool. Network Monitoring is  a Sampling technique it can be random or systematic so choose any sampling technique like I choose Network Monitoring using Poisson Sampling. And it also depends where you are performing your experiment on simulated environment(Mininet) or with real openflow enabled Switch.

Hello Vipin,

Thanks for response.

The network I'm current working with is based on Mininet for the time being. About NetFlow, I've not used it for flow analysis besides sFlow is what I'm familiar with in sampling the packet transmission.

Hi Asma,

But you can control your packet transmission in sampling that is what you need whenever you see intrusion packet control your packet transmission.

Hi Asma, 

Did you get answer about your query , because also i am searching about the best open source monitoring tools for SDN network and measuring controller .