Collecting flows at an IXP

Tue Jun 26 13:38:50 UTC 2012

Hi Graham,

Have you had a look at Argus? http://www.qosient.com/argus/

It works well for us and they have very active support community to boot!

Cheers,
Harry

On 06/26/2012 01:45 AM, Graham Beneke wrote:
> Hi All
>
> I'm busy doing some digging to find a solution for collecting layer-2
> flows data on a medium sized IXP. All we have at the moment is some MRTG
> graphs and we're trying to get a better view into IPv4 vs IPv6, src and
> dst MACs, packet sizes and also perhaps port & protocol trends.
>
> I found Richard A. Steenbergen's NANOG 39 presentation and not much
> since then.
>
> Is it still correct that Cisco does not support sFlow?
>
> Are you able to get the same kind of useful data using Netflow v9?
>
> Which FOSS flow collectors do an decent/adequate job at crunching about
> 10Gbps worth of flows and presenting it in a useful way?
>
> Thanks