Looking for Netflow analysis package
eyeronic.design at gmail.com
Tue May 14 23:17:40 UTC 2013
Solarwinds netflow is also way, way overpriced for what you get...and
their license model for Netflow is utterly ridiculous.
I like Splunk plus Netflow integrator. With some custom lookup
tables, you might be able to code up a view that'll show you the
per-ASN stats. You can definitely do it by Subnet pretty easily.
On Tue, May 14, 2013 at 4:10 PM, David Hubbard
<dhubbard at dino.hostasaurus.com> wrote:
> The Netflow analyzer from Solarwinds works pretty well for
> all of that provided you're receiving the data from a
> Cisco source that does netflow v9. It is not very useful
> at all for sflow though because they haven't updated it to
> recognize the ASN data. Their sales staff will also hound
> you relentlessly about 'special pricing' for their other
> products while not actually being willing to give anything
> all that special, so use a throwaway email address and phone
> number if you do choose to purchase and don't want to be
>> -----Original Message-----
>> From: Erik Sundberg [mailto:ESundberg at nitelusa.com]
>> Sent: Tuesday, May 14, 2013 7:00 PM
>> To: nanog at nanog.org
>> Subject: Looking for Netflow analysis package
>> Does anyone know of a netflow collector that will do the following.
>> *Graph/List Destination Networks By Top AS
>> *Graph/List Destination Networks By Top IP Address
>> *AS Path Analysis
>> *Traffic Type (ICMP, TCP, UDP, IPSEC, HTTP, SSH, SMTP, etc..)
>> We will be using this to help us decide who to Peer with and
>> what transit Providers to look at.
>> I am familiar with Arbor Network's Peak Flow utility but it's
>> a little too pricy.
>> I also found AS-Stats https://neon1.net/as-stats/ look
>> promising from the power point on their page.
>> CONFIDENTIALITY NOTICE: This e-mail transmission, and any
>> documents, files or previous e-mail messages attached to it
>> may contain confidential information that is legally
>> privileged. If you are not the intended recipient, or a
>> person responsible for delivering it to the intended
>> recipient, you are hereby notified that any disclosure,
>> copying, distribution or use of any of the information
>> contained in or attached to this transmission is STRICTLY
>> PROHIBITED. If you have received this transmission in error
>> please notify the sender immediately by replying to this
>> e-mail. You must destroy the original transmission and its
>> attachments without reading or saving in any manner. Thank you.
09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
More information about the NANOG