We present a visualization design to enhance the ability of

an administrator to detect and investigate anomalous traffic

between a local network and external domains. Central to

the design is a parallel axes view which displays NetFlow

records as links between two machines or domains while

employing a variety of visual cues to assist the user. We

describe several filtering options that can be employed to

hide uninteresting or innocuous traffic such that the user

can focus his or her attention on the more unusual network

flows.