oss netflow collector/trending/analysis

Avi Freedman freedman at freedman.net
Fri May 2 15:00:15 UTC 2014


There's also SiLK from CMU.  It's powerful but has a learning curve.

I also see pmacct being used both by some end networks and by 
some vendors as part of systems.

Avi

> Hey There,
> 
> I was just wondering, for people who are doing netflow analysis with
> open source tools and who are doing at least 10k or more flows per
> second, what are you using?
> 
> I know of three tool sets:
> 
> - The classic osu flow-tools and the modern continuation/fork.
> - ntop
> - nfdump/nfsen
> 
> Is there anything else I've missed? A few folks here really seem to like
> nfsen/nfdump.
> 
> Thanks,
> 
> Matt




More information about the NANOG mailing list