Collecting flows at an IXP

Tue Jun 26 20:31:41 UTC 2012

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

On 06/25/2012 10:45 PM, Graham Beneke wrote:
> Hi All
> 
> I'm busy doing some digging to find a solution for collecting
> layer-2 flows data on a medium sized IXP. All we have at the moment
> is some MRTG graphs and we're trying to get a better view into IPv4
> vs IPv6, src and dst MACs, packet sizes and also perhaps port &
> protocol trends.
> 
> I found Richard A. Steenbergen's NANOG 39 presentation and not
> much since then.
> 
> Is it still correct that Cisco does not support sFlow?
> 
> Are you able to get the same kind of useful data using Netflow v9?
> 
> Which FOSS flow collectors do an decent/adequate job at crunching
> about 10Gbps worth of flows and presenting it in a useful way?
> 
> Thanks
- -------------------
Another option to consider would be nfsen/nfdump..running nicely as a
plugin under cacti so we get a central view.


regards,
/virendra
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iF4EAREIAAYFAk/qHC0ACgkQ3HuimOHfh+FioQD/Qs7/fje8hziGEym2Wh0sIDWI
16p7ZC+6cJnUUGHzPJsA/jzn0/iCwDCFO8UKSjkXuEpwysRo8U/WeZpTKcbzvhHN
=k2E2
-----END PGP SIGNATURE-----