flow analysis for juniper devices

Mon Nov 15 23:33:37 UTC 2010

Hi,

On Sun, Nov 14, 2010 at 4:17 AM, Richard A Steenbergen <ras at e-gerbil.net> wrote:
> On Sun, Nov 14, 2010 at 12:07:40PM +1000, Mehmet Akcin wrote:
>> any recommendations on freeware flow analysis tool which can show the
>> flow not only per prefix basis but also show asn and/or country/region
>> as well? Juniper only.
>>
>> feel free to contact on/off list.
>
> Juniper's flow export is just like everyone else's (*), so any tool will
> do the same thing. Country/region analysis would depend on third party
> geolocation services, which have nothing to do with netflow. :)
>
> (*) Well, except M/T/MX only support NetFlow v5/v8 in the free software
> based sampling mode, you need an expensive services card and software
> license to do v9 for some reason.

Shouldn't there be a (**)

(**) Also Except for MX'es with trio chipsets. These can do
inline-jflow that export to IPFIX (modified netflow v9)

All of the open source collector solutions I've tried that can handle
v9 cannot handle IPFIX from the trio cards.

Richard; Do you have something that handles IPFIX?

Bas