On Thu, Sep 30, 2010 at 12:47:22AM +0000, Andrew O'Brien wrote:
> Firstly I apologise for referring to what might seem to be a
> "competitor" but I've found that I use this tool and flow-tools in
> tandem quite frequently.
Nothing to apologize for - it's not off-topic for the list to discuss
other products that "compete" with flow-tools.
> At $work we use the Silk tools from NetSA for storage and
>searching/reporting of flow data that we ingest from various remote
>sources. Some of those sources are flow-tools files, some v5 PDUs,
>some raw pcap, some IPFIX so this fit the bill nicely. Its all
>unidirectional though from vague memory.
Have you done any work with IPv6 flows? I started evaluating Silk
to replace my aging flow-tools installation, but stopped when I
got to the release notes mentioning that they don't fully support
IPv6.
Otherwise Silk looked like a great replacement for flow-tools, which
is at a dead end since it's not going to support Netflow v9 or IPv6.
I'm also looking at nfdump, which seems much easier to use than flow-tools
but is otherwise organized similarly enough that it won't be hard to drop
it in to replace a flow-tools installation. What's especially nice about
nfdump is that it will let you do queries with tcpdump-style syntax -
think flow-filter, flow-stat, and flow-print all rolled up into one
utility.
-- Ed
_______________________________________________
Flow-tools mailing list
[email protected]
http://mailman.splintered.net/mailman/listinfo/flow-tools
