Re: Netflow Analysis Software

[Jason Chambers <jchambers () UCLA EDU>]

On 5/4/11 10:52 AM, Justin Azoff wrote:
> I've been looking at v10/IPFIX which apparently supports other fields
> like HTTP_URL.
>
> This blog post mentions one of the example use cases:
>
>     http://www.plixer.com/blog/scrutinizer/monitor-netflix-traffic-using-netflow-reporting/
>
> but there doesn't seem to be as many open tools for working with this
> data yet.
>
> Is anyone actively using IPFIX now?

Yes, albeit a limited form.  As I understand it a lot of open source
tools rely on libfixbuf which is still under development to fully
support templates.  In the meanwhile hack solutions fit the bill
(generate that data on sensors and store independent of flow repository)

Regards,

--Jason