Re: Looking for Netflow analysis package

[Mike Hale <eyeronic.design () gmail com>]

Solarwinds netflow is also way, way overpriced for what you get...and
their license model for Netflow is utterly ridiculous.

I like Splunk plus Netflow integrator.  With some custom lookup
tables, you might be able to code up a view that'll show you the
per-ASN stats.  You can definitely do it by Subnet pretty easily.

On Tue, May 14, 2013 at 4:10 PM, David Hubbard
<dhubbard () dino hostasaurus com> wrote:
> The Netflow analyzer from Solarwinds works pretty well for
> all of that provided you're receiving the data from a
> Cisco source that does netflow v9.  It is not very useful
> at all for sflow though because they haven't updated it to
> recognize the ASN data.  Their sales staff will also hound
> you relentlessly about 'special pricing' for their other
> products while not actually being willing to give anything
> all that special, so use a throwaway email address and phone
> number if you do choose to purchase and don't want to be
> bothered.
>
> David
>
> > -----Original Message-----
> > From: Erik Sundberg [mailto:ESundberg () nitelusa com]
> > Sent: Tuesday, May 14, 2013 7:00 PM
> > To: nanog () nanog org
> > Subject: Looking for Netflow analysis package
> >
> > Does anyone know of a netflow collector that will do the following.
> > *Graph/List Destination Networks By Top AS
> > *Graph/List Destination Networks By Top IP Address
> > *AS Path Analysis
> > *Traffic Type (ICMP, TCP, UDP, IPSEC, HTTP, SSH, SMTP, etc..)
> >
> > We will be using this to help us decide who to Peer with and
> > what transit Providers to look at.
> >
> > I am familiar with Arbor Network's Peak Flow utility but it's
> > a little too pricy.
> > I also found AS-Stats https://neon1.net/as-stats/ look
> > promising from the power point on their page.
> >
> > Thanks
> > Erik
> >
> >
> > ________________________________
> >
> > CONFIDENTIALITY NOTICE: This e-mail transmission, and any
> > documents, files or previous e-mail messages attached to it
> > may contain confidential information that is legally
> > privileged. If you are not the intended recipient, or a
> > person responsible for delivering it to the intended
> > recipient, you are hereby notified that any disclosure,
> > copying, distribution or use of any of the information
> > contained in or attached to this transmission is STRICTLY
> > PROHIBITED. If you have received this transmission in error
> > please notify the sender immediately by replying to this
> > e-mail. You must destroy the original transmission and its
> > attachments without reading or saving in any manner. Thank you.



-- 
09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0