nanog mailing list archives

Re: Collecting flows at an IXP


From: virendra rode <virendra.rode () gmail com>
Date: Tue, 26 Jun 2012 13:31:41 -0700

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

On 06/25/2012 10:45 PM, Graham Beneke wrote:
Hi All

I'm busy doing some digging to find a solution for collecting
layer-2 flows data on a medium sized IXP. All we have at the moment
is some MRTG graphs and we're trying to get a better view into IPv4
vs IPv6, src and dst MACs, packet sizes and also perhaps port &
protocol trends.

I found Richard A. Steenbergen's NANOG 39 presentation and not
much since then.

Is it still correct that Cisco does not support sFlow?

Are you able to get the same kind of useful data using Netflow v9?

Which FOSS flow collectors do an decent/adequate job at crunching
about 10Gbps worth of flows and presenting it in a useful way?

Thanks
- -------------------
Another option to consider would be nfsen/nfdump..running nicely as a
plugin under cacti so we get a central view.


regards,
/virendra
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iF4EAREIAAYFAk/qHC0ACgkQ3HuimOHfh+FioQD/Qs7/fje8hziGEym2Wh0sIDWI
16p7ZC+6cJnUUGHzPJsA/jzn0/iCwDCFO8UKSjkXuEpwysRo8U/WeZpTKcbzvhHN
=k2E2
-----END PGP SIGNATURE-----


Current thread: