Hi,

On Fri, Jan 11, 2008 at 10:28:28AM -0600, Petreski, Samuel wrote:
> nProbe by ntop.org is pretty robust tool for generating v5/v9 flows and
> fairly inexpensive.
> 
> http://www.ntop.org/nProbe.html

Has any of you done a reality-check before recommending these tools,
whether one of them can actually *handle* a 10G-link?

Sniffing 10G without losing packets is *hard*.

Sniffing 10G and doing any sort of math with it is *very hard*.

Any "sniff packets and do flow exports from there" application that 
aims to do better than the flow hardware on the PFC3 needs to be really,
really, *really* good.

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             [EMAIL PROTECTED]
fax: +49-89-35655025                        [EMAIL PROTECTED]

Attachment: pgpHj0uWoKx9C.pgp
Description: PGP signature

_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to