Check out http://www.switch.ch/network/projects/completed/TF-NGN/floma/software.html for the definitive list of what's out there.
If you're developing on your own, nfdump/nfsen is probably the way to go. flow-tools would work fine, but its lack of IPv6 sort of kills its future prospects. Putting flows in SQL is certainly doable (especially on a home network), but be forewarned that network flows aren't as simple as you'd like them to be and the sheer volume of indexing all that data is significant. That's why most packages rely on an aggregate data store like rrd for fast min/max/avg histories, and then keep a month or so of raw flow files for running detailed reports against. -Craig ________________________________________ From: [email protected] [[email protected]] On Behalf Of Don Gould [[email protected]] Sent: Sunday, January 23, 2011 2:40 AM To: Michael W. Lucas Cc: [email protected] Subject: Re: [Flow-tools] Getting started... On 18/01/2011 1:14 a.m., Michael W. Lucas wrote: > Flow-tools will let you measure traffic on that basis, Great. Can I have a pointer on getting started? I've had a bit of a look over the web site but wasn't really sure where to start. I think my interest is: aa. Collect/catch netflow data and do something... bb. Stuff it in a mysql database? Or should I be looking at stuffing it in RDDtool? cc. Pull the data back out using PHP to present it. & dd. cron some totals from time to time to decide if I need to change the rules in the router. If it's not already obvious, this really is just a use case so I can prove a concept. The wife and I don't really want to account our data (except when I'm in a bad mood with her ;) ) I'm keen to be able to catch the data and stuff it in a mysql database because it's just easy for me to pull out of that. I really don't know how you pull data from a RDDTool. I'm keen to do this as line speed out of the 750G (a gigibit router) which I'm told will deal with thoughput of about 350mbit/s and 5 to 6mps, without going broke having to buy a quad processor i7 machine just to do the accounting... or am I dreaming? but it won't > let you throttle a users' bandwidth. You'll need to use the Mikrotik > shaping features for bandwidth control. Yip, sorry, my bad, I should have explained that. I didn't assume that flow-tools would do that bit. D _______________________________________________ Flow-tools mailing list [email protected] http://mailman.splintered.net/mailman/listinfo/flow-tools _______________________________________________ Flow-tools mailing list [email protected] http://mailman.splintered.net/mailman/listinfo/flow-tools
