Solarwinds netflow is also way, way overpriced for what you get...and their license model for Netflow is utterly ridiculous.
I like Splunk plus Netflow integrator. With some custom lookup tables, you might be able to code up a view that'll show you the per-ASN stats. You can definitely do it by Subnet pretty easily. On Tue, May 14, 2013 at 4:10 PM, David Hubbard <[email protected]> wrote: > The Netflow analyzer from Solarwinds works pretty well for > all of that provided you're receiving the data from a > Cisco source that does netflow v9. It is not very useful > at all for sflow though because they haven't updated it to > recognize the ASN data. Their sales staff will also hound > you relentlessly about 'special pricing' for their other > products while not actually being willing to give anything > all that special, so use a throwaway email address and phone > number if you do choose to purchase and don't want to be > bothered. > > David > >> -----Original Message----- >> From: Erik Sundberg [mailto:[email protected]] >> Sent: Tuesday, May 14, 2013 7:00 PM >> To: [email protected] >> Subject: Looking for Netflow analysis package >> >> Does anyone know of a netflow collector that will do the following. >> *Graph/List Destination Networks By Top AS >> *Graph/List Destination Networks By Top IP Address >> *AS Path Analysis >> *Traffic Type (ICMP, TCP, UDP, IPSEC, HTTP, SSH, SMTP, etc..) >> >> We will be using this to help us decide who to Peer with and >> what transit Providers to look at. >> >> I am familiar with Arbor Network's Peak Flow utility but it's >> a little too pricy. >> I also found AS-Stats https://neon1.net/as-stats/ look >> promising from the power point on their page. >> >> Thanks >> Erik >> >> >> ________________________________ >> >> CONFIDENTIALITY NOTICE: This e-mail transmission, and any >> documents, files or previous e-mail messages attached to it >> may contain confidential information that is legally >> privileged. If you are not the intended recipient, or a >> person responsible for delivering it to the intended >> recipient, you are hereby notified that any disclosure, >> copying, distribution or use of any of the information >> contained in or attached to this transmission is STRICTLY >> PROHIBITED. If you have received this transmission in error >> please notify the sender immediately by replying to this >> e-mail. You must destroy the original transmission and its >> attachments without reading or saving in any manner. Thank you. >> >> > -- 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
