Open source alternatives to UNINETT Stager for visual netflow peering analysis
Joe Loiacono
jloiacon at csc.com
Fri Apr 10 21:06:50 UTC 2015
You could use FlowViewer with the flow-tools underlying collector option
if you're collecting v5 netflow. This will permit you to keep long-term
graphs (ala MRTG - Last 24 hours, Last 7 days, etc.) for each AS peer with
5-minute granularity You can also graph specified time intervals at much
smaller time-bucket sizes.
FlowViewer has an IPFIX (e.g., v9, FNF, etc.) underlying collector also;
SiLK. However, last I checked, SiLK is not collecting AS information.
https://sourceforge.net/projects/flowviewer
Regards,
Joe
From: "Peter Kranz" <pkranz at unwiredltd.com>
To: <nanog at nanog.org>
Date: 04/10/2015 11:26 AM
Subject: Open source alternatives to UNINETT Stager for visual
netflow peering analysis
Sent by: "NANOG" <nanog-bounces at nanog.org>
We've really enjoyed the open source Stager platform for netflow analysis,
however the code has not seen updates in recent years. Looking for
alternative open source netflow analysis platforms with a web interface.
There are quite a few netflow tools around these days, and we are looking
for something that performs the steps needed to showing us traffic volumes
to particular AS#'s and their downstream customers for peering analysis
decisions. I can get coarse answers from nfdump, but would like something
more elegant for the NOC to use.
Peter Kranz
www.UnwiredLtd.com <http://www.unwiredltd.com/>
Desk: 510-868-1614 x100
Mobile: 510-207-0000
pkranz at unwiredltd.com <mailto:pkranz at unwiredltd.com>
More information about the NANOG
mailing list