On Tue, 17 May 2011, Lee Starnes wrote:
Does anyone have any recommendations for an open source netflow solution? If there is nothing out there, what is recommended in the non-open source world? Are there any to absolutely stay away from?
The answer to that question would depend on what you want to do with the Netflow data you collect. If you're mainly interested in generating graphs and top-talker reports, NFSen/NFDump is a very usable option.
If you're looking for something that does more than that, then you're getting into the realm of commercial applications.
Another increasingly important question is if you want or need Netflow v9/v10 (IPFIX) support, to get Netflow data for IPv6 traffic. This becomes important, not only in terms of gauging the capabilities of your Netflow collection/analysis setup, but also determining features and pricing for new router hardware/software/licensing. Both Cisco and Juniper are moving toward a model where certain features need to be individually licensed and activated, or additional hardware needs to be purchased (Juniper's Multiservices PICs/MPCs for the M/MX platforms comes to mind).
jms _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
