Looking for Netflow analysis package

Tue May 14 23:17:40 UTC 2013

Solarwinds netflow is also way, way overpriced for what you get...and
their license model for Netflow is utterly ridiculous.

I like Splunk plus Netflow integrator.  With some custom lookup
tables, you might be able to code up a view that'll show you the
per-ASN stats.  You can definitely do it by Subnet pretty easily.

On Tue, May 14, 2013 at 4:10 PM, David Hubbard
<dhubbard at dino.hostasaurus.com> wrote:
> The Netflow analyzer from Solarwinds works pretty well for
> all of that provided you're receiving the data from a
> Cisco source that does netflow v9.  It is not very useful
> at all for sflow though because they haven't updated it to
> recognize the ASN data.  Their sales staff will also hound
> you relentlessly about 'special pricing' for their other
> products while not actually being willing to give anything
> all that special, so use a throwaway email address and phone
> number if you do choose to purchase and don't want to be
> bothered.
>
> David
>
>> -----Original Message-----
>> From: Erik Sundberg [mailto:ESundberg at nitelusa.com]
>> Sent: Tuesday, May 14, 2013 7:00 PM
>> To: nanog at nanog.org
>> Subject: Looking for Netflow analysis package
>>
>> Does anyone know of a netflow collector that will do the following.
>> *Graph/List Destination Networks By Top AS
>> *Graph/List Destination Networks By Top IP Address
>> *AS Path Analysis
>> *Traffic Type (ICMP, TCP, UDP, IPSEC, HTTP, SSH, SMTP, etc..)
>>
>> We will be using this to help us decide who to Peer with and
>> what transit Providers to look at.
>>
>> I am familiar with Arbor Network's Peak Flow utility but it's
>> a little too pricy.
>> I also found AS-Stats https://neon1.net/as-stats/ look
>> promising from the power point on their page.
>>
>> Thanks
>> Erik
>>
>>
>> ________________________________
>>
>> CONFIDENTIALITY NOTICE: This e-mail transmission, and any
>> documents, files or previous e-mail messages attached to it
>> may contain confidential information that is legally
>> privileged. If you are not the intended recipient, or a
>> person responsible for delivering it to the intended
>> recipient, you are hereby notified that any disclosure,
>> copying, distribution or use of any of the information
>> contained in or attached to this transmission is STRICTLY
>> PROHIBITED. If you have received this transmission in error
>> please notify the sender immediately by replying to this
>> e-mail. You must destroy the original transmission and its
>> attachments without reading or saving in any manner. Thank you.
>>
>>
>

-- 
09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0