nanog mailing list archives

RE: Looking for Netflow analysis package


From: David Hubbard <dhubbard () dino hostasaurus com>
Date: Tue, 14 May 2013 19:10:05 -0400

The Netflow analyzer from Solarwinds works pretty well for
all of that provided you're receiving the data from a
Cisco source that does netflow v9.  It is not very useful
at all for sflow though because they haven't updated it to
recognize the ASN data.  Their sales staff will also hound
you relentlessly about 'special pricing' for their other
products while not actually being willing to give anything
all that special, so use a throwaway email address and phone
number if you do choose to purchase and don't want to be
bothered.

David

-----Original Message-----
From: Erik Sundberg [mailto:ESundberg () nitelusa com] 
Sent: Tuesday, May 14, 2013 7:00 PM
To: nanog () nanog org
Subject: Looking for Netflow analysis package

Does anyone know of a netflow collector that will do the following.
*Graph/List Destination Networks By Top AS
*Graph/List Destination Networks By Top IP Address
*AS Path Analysis
*Traffic Type (ICMP, TCP, UDP, IPSEC, HTTP, SSH, SMTP, etc..)

We will be using this to help us decide who to Peer with and 
what transit Providers to look at.

I am familiar with Arbor Network's Peak Flow utility but it's 
a little too pricy.
I also found AS-Stats https://neon1.net/as-stats/ look 
promising from the power point on their page.

Thanks
Erik


________________________________

CONFIDENTIALITY NOTICE: This e-mail transmission, and any 
documents, files or previous e-mail messages attached to it 
may contain confidential information that is legally 
privileged. If you are not the intended recipient, or a 
person responsible for delivering it to the intended 
recipient, you are hereby notified that any disclosure, 
copying, distribution or use of any of the information 
contained in or attached to this transmission is STRICTLY 
PROHIBITED. If you have received this transmission in error 
please notify the sender immediately by replying to this 
e-mail. You must destroy the original transmission and its 
attachments without reading or saving in any manner. Thank you.




Current thread: