Flow collection and analysis

Tue Jan 25 17:39:53 UTC 2022

Hi,

There is also Elastiflow https://docs.elastiflow.com/docs/
https://github.com/robcowart/elastiflow.

Cordialement / Best regards

Pierre Lancastre

Le mar. 25 janv. 2022 à 17:45, Mel Beckman <mel at beckman.org> a écrit :

> We use, depending on the situation, Intermapper, PRTG, and NTop.
>
> Intermapper has the most powerful viewing app, but it’s expensive in that
> you have to pay for each flow collector. It’s an actual app (Windows, Mac,
> and Linux), rather than a web-based interface, so they can do more tricks
> with the GUI, like drill down and sorting.
>
> PRTG includes its web-based flow collector and viewer for free, and there
> is even a free 100-sensor edition of the product that lets you use just the
> flow stuff fir free forever.
>
> NTop is an open source web-based flow sensor and viewer, with a combo paid
> license model specifically for the flow collection. It connects directly to
> a mirror port and sucks up the flow info, where is the other products
> required to have some hardware device that exports flows. But you can get
> dirt cheap used Cisco routers that do this, such as the 1941, which
> although bulky do the job for a few hundred bucks. Once you get into 10 Gb
> speeds though you need dedicated hardware sensors in newer gear, which is
> pretty pricey. But if you have 10 Gb traffic you can afford it :-)
>
> Ntop also has a commercial arm called Nbox, Which has a range of hardware
> based ready to go solutions. However it’s all supported out of Italy, and
> pretty much by one guy, so we’ve had uneven results with customers that
> purchased it.
>
> -mel
>
> > On Jan 25, 2022, at 8:30 AM, Laura Smith via NANOG <nanog at nanog.org>
> wrote:
> >
> > On Tuesday, January 25th, 2022 at 15:46, David Bass <
> davidbass570 at gmail.com> wrote:
> >
> >> Wondering what others in the small to medium sized networks out there
> are using these days for netflow data collection, and your opinion on the
> tool?
> >>
> >> Thanks!
> >
> >
> > Not a suggestion, but a question ....
> >
> > Curious to know if anyone (apart from Cloudflare, obvs !) is using
> Goflow ? (https://github.com/cloudflare/goflow)
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20220125/5a3c8165/attachment.html>