Looking for Netflow analysis package

Tue May 14 23:45:28 UTC 2013

Where are all my ntop brethren?

Sent from my Mobile Device.

-------- Original message --------
From: David Hubbard <dhubbard at dino.hostasaurus.com>
Date: 05/14/2013 4:12 PM (GMT-08:00)
To: nanog at nanog.org
Subject: RE: Looking for Netflow analysis package

The Netflow analyzer from Solarwinds works pretty well for
all of that provided you're receiving the data from a
Cisco source that does netflow v9.  It is not very useful
at all for sflow though because they haven't updated it to
recognize the ASN data.  Their sales staff will also hound
you relentlessly about 'special pricing' for their other
products while not actually being willing to give anything
all that special, so use a throwaway email address and phone
number if you do choose to purchase and don't want to be
bothered.

David

> -----Original Message-----
> From: Erik Sundberg [mailto:ESundberg at nitelusa.com]
> Sent: Tuesday, May 14, 2013 7:00 PM
> To: nanog at nanog.org
> Subject: Looking for Netflow analysis package
>
> Does anyone know of a netflow collector that will do the following.
> *Graph/List Destination Networks By Top AS
> *Graph/List Destination Networks By Top IP Address
> *AS Path Analysis
> *Traffic Type (ICMP, TCP, UDP, IPSEC, HTTP, SSH, SMTP, etc..)
>
> We will be using this to help us decide who to Peer with and
> what transit Providers to look at.
>
> I am familiar with Arbor Network's Peak Flow utility but it's
> a little too pricy.
> I also found AS-Stats https://neon1.net/as-stats/ look
> promising from the power point on their page.
>
> Thanks
> Erik
>
>
> ________________________________
>
> CONFIDENTIALITY NOTICE: This e-mail transmission, and any
> documents, files or previous e-mail messages attached to it
> may contain confidential information that is legally
> privileged. If you are not the intended recipient, or a
> person responsible for delivering it to the intended
> recipient, you are hereby notified that any disclosure,
> copying, distribution or use of any of the information
> contained in or attached to this transmission is STRICTLY
> PROHIBITED. If you have received this transmission in error
> please notify the sender immediately by replying to this
> e-mail. You must destroy the original transmission and its
> attachments without reading or saving in any manner. Thank you.
>
>