Looking for Netflow analysis package

Wed May 15 18:39:12 UTC 2013

I can vouch for the FCP.  I haven't used their newer platforms but the
device worked very well.

On Wed, May 15, 2013 at 10:50 AM, Scott Berkman <scott at sberkman.net> wrote:

> I'd also suggest looking at NetFlow Auditor:
>
> http://www.netflowauditor.com/
>
> I think it will do all of those except AS path analysis.
>
> Another good option might also be the InterNAP FCP, which does all of that
> PLUS optimizes routing based on the data (can also be deployed in a preview
> mode):
>
> http://www.internap.com/business-internet-connectivity-services/route-optimi
> zation-flow-control/
>
> Good luck,
>
>   -Scott
>
>
> -----Original Message-----
> From: Erik Sundberg [mailto:ESundberg at nitelusa.com]
> Sent: Tuesday, May 14, 2013 7:00 PM
> To: nanog at nanog.org
> Subject: Looking for Netflow analysis package
>
> Does anyone know of a netflow collector that will do the following.
> *Graph/List Destination Networks By Top AS *Graph/List Destination Networks
> By Top IP Address *AS Path Analysis *Traffic Type (ICMP, TCP, UDP, IPSEC,
> HTTP, SSH, SMTP, etc..)
>
> We will be using this to help us decide who to Peer with and what transit
> Providers to look at.
>
> I am familiar with Arbor Network's Peak Flow utility but it's a little too
> pricy.
> I also found AS-Stats https://neon1.net/as-stats/ look promising from the
> power point on their page.
>
> Thanks
> Erik
>
>
> ________________________________
>
> CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files
> or previous e-mail messages attached to it may contain confidential
> information that is legally privileged. If you are not the intended
> recipient, or a person responsible for delivering it to the intended
> recipient, you are hereby notified that any disclosure, copying,
> distribution or use of any of the information contained in or attached to
> this transmission is STRICTLY PROHIBITED. If you have received this
> transmission in error please notify the sender immediately by replying to
> this e-mail. You must destroy the original transmission and its attachments
> without reading or saving in any manner. Thank you.
>
>
>