Looking for Netflow analysis package

David Edelman dedelman at iname.com
Tue May 14 23:51:11 UTC 2013


Take a look at argus www.qosient.com



Dave Edelman


On May 14, 2013, at 19:17, Mike Hale <eyeronic.design at gmail.com> wrote:

> Solarwinds netflow is also way, way overpriced for what you get...and
> their license model for Netflow is utterly ridiculous.
> 
> I like Splunk plus Netflow integrator.  With some custom lookup
> tables, you might be able to code up a view that'll show you the
> per-ASN stats.  You can definitely do it by Subnet pretty easily.
> 
> On Tue, May 14, 2013 at 4:10 PM, David Hubbard
> <dhubbard at dino.hostasaurus.com> wrote:
>> The Netflow analyzer from Solarwinds works pretty well for
>> all of that provided you're receiving the data from a
>> Cisco source that does netflow v9.  It is not very useful
>> at all for sflow though because they haven't updated it to
>> recognize the ASN data.  Their sales staff will also hound
>> you relentlessly about 'special pricing' for their other
>> products while not actually being willing to give anything
>> all that special, so use a throwaway email address and phone
>> number if you do choose to purchase and don't want to be
>> bothered.
>> 
>> David
>> 
>>> -----Original Message-----
>>> From: Erik Sundberg [mailto:ESundberg at nitelusa.com]
>>> Sent: Tuesday, May 14, 2013 7:00 PM
>>> To: nanog at nanog.org
>>> Subject: Looking for Netflow analysis package
>>> 
>>> Does anyone know of a netflow collector that will do the following.
>>> *Graph/List Destination Networks By Top AS
>>> *Graph/List Destination Networks By Top IP Address
>>> *AS Path Analysis
>>> *Traffic Type (ICMP, TCP, UDP, IPSEC, HTTP, SSH, SMTP, etc..)
>>> 
>>> We will be using this to help us decide who to Peer with and
>>> what transit Providers to look at.
>>> 
>>> I am familiar with Arbor Network's Peak Flow utility but it's
>>> a little too pricy.
>>> I also found AS-Stats https://neon1.net/as-stats/ look
>>> promising from the power point on their page.
>>> 
>>> Thanks
>>> Erik
>>> 
>>> 
>>> ________________________________
>>> 
>>> CONFIDENTIALITY NOTICE: This e-mail transmission, and any
>>> documents, files or previous e-mail messages attached to it
>>> may contain confidential information that is legally
>>> privileged. If you are not the intended recipient, or a
>>> person responsible for delivering it to the intended
>>> recipient, you are hereby notified that any disclosure,
>>> copying, distribution or use of any of the information
>>> contained in or attached to this transmission is STRICTLY
>>> PROHIBITED. If you have received this transmission in error
>>> please notify the sender immediately by replying to this
>>> e-mail. You must destroy the original transmission and its
>>> attachments without reading or saving in any manner. Thank you.
> 
> 
> 
> -- 
> 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
> 



More information about the NANOG mailing list