<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>Try FlowViewer (analyzing, graphing, tending software) + SiLK
      (robust, high-performance capture software from Carnegie-Mellon).
      <br>
    </p>
    <p>Pretty full netflow analysis package; free.</p>
    <p>See: <a class="moz-txt-link-freetext" href="http://flowviewer.net">http://flowviewer.net</a></p>
    <p>Joe<br>
    </p>
    <div class="moz-cite-prefix">On 5/16/2022 2:34 PM, Matthew Crocker
      wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:BL0PR14MB3554BC77508C23795E0D832C82CF9@BL0PR14MB3554.namprd14.prod.outlook.com">
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
      <meta name="Generator" content="Microsoft Word 15 (filtered
        medium)">
      <style>@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        font-size:12.0pt;
        font-family:"Calibri",sans-serif;}span.EmailStyle17
        {mso-style-type:personal-compose;
        font-family:"Calibri",sans-serif;
        color:windowtext;}.MsoChpDefault
        {mso-style-type:export-only;
        font-size:12.0pt;
        font-family:"Calibri",sans-serif;}div.WordSection1
        {page:WordSection1;}</style>
      <div class="WordSection1">
        <p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
        <p class="MsoNormal"><span style="font-size:11.0pt">I’m looking
            for a free-ish Linux open sources Netflow
            collector/analyser.  I have 5 Juniper MX routers that will
            send IPFIX flows to for an ISP network.    I’m hoping it is
            something I can run in AWS/EC2 as I don’t want to worry
            about storage again in my lifetime.  Does anyone have any
            recommendations?<o:p></o:p></span></p>
        <p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
        <p class="MsoNormal"><span style="font-size:11.0pt">For
            reporting I would like to generate basic  usage reports
            to/from IP/Subnet/ASN.  It would be great if it could also
            detect DDoS and activate flowspec back into my core routers
            but that isn’t a requirement<o:p></o:p></span></p>
        <p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
        <p class="MsoNormal"><span style="font-size:11.0pt">Thanks<o:p></o:p></span></p>
        <p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
        <p class="MsoNormal"><span style="font-size:11.0pt">-Matt<o:p></o:p></span></p>
        <p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
      </div>
    </blockquote>
  </body>
</html>