NTopng isn’t bad but be aware of your underlying hardware when dealing with traffic volumes above a few Gbit. You’ll need to be conscious of NUMA node assignment and NIC drivers. I would suggest you look into PF_RING ZC as well (http://www.ntop.org/products/packet-capture/pf_ring/pf_ring-zc-zero-copy/ <http://www.ntop.org/products/packet-capture/pf_ring/pf_ring-zc-zero-copy/>) due to NIC interrupts.
PMacct is another good one. - Tim > On 20 Sep 2017, at 9:48 am, Dave Browning <[email protected]> wrote: > > Hi All, > > Just chasing people’s recommendations for a good carrier/ISP grade Netflow > collector & analyser. Have had a play with ntopng & nprobe and so far is > looking the goods. > > Cheers, > Dave > > Dave Browning | Network Engineer > P 1300 791 678 > Level 1, 12 Railway Tce, Milton QLD 4064 > _______________________________________________ > AusNOG mailing list > [email protected] > http://lists.ausnog.net/mailman/listinfo/ausnog
_______________________________________________ AusNOG mailing list [email protected] http://lists.ausnog.net/mailman/listinfo/ausnog
