Re: [Nfsen-discuss] [ask] report with asn number

[Peter Haag via Nfsen-discuss]

On 03.05.21 11:16, Brian Candler wrote:
> On 03/05/2021 09:00, hendranata yahoo wrote:
>> okay thanks for your idea.
>>
>> what is the latest stable version of nfsen? 
> 
> The latest stable version is whatever tarball is published on sourceforge 
> <https://sourceforge.net/projects/nfsen/> (1.3.8) - which is over 4 years
> old.  There is no public official source repo, and no patches being accepted, 
> so I run nfsen 1.3.8 with four local bugfix patches.  There was a
> third-party repo <https://github.com/p-alik/nfsen> where patches were 
> accepted, but that is now frozen as well.

nfsen is *very* old code, and actually I wanted to rewrite a new version, which 
got delayed and finally aborted for a number of reasons.
I could consider to give it a go again, but I am still uncertain if it would 
still be used these days. Feedback would be appreciated.
If there would be a new NfSen incarnation, I would write it in Golang as it 
provides far more flexibility and speed. I am not a exceptionally gifted
GUI/Web developer - maybe someone would be willing to support. However, also 
for a new NfSen, I could prefer KISS
- easy of use and - hopefully - fast.

> 
> Fortunately, nfdump *is* being maintained.  nfdump/nfcapd is still the 
> simplest, lowest-resource way I know of capturing netflow records, at a tiny
> fraction of the hardware cost of other solutions like ElastiFlow.

nfdump is growing and the unicorn branch @github is a beta version of 1.7. It 
contains a few new features such as maxmind integration, which allows
geo mapping as well as AS mapping, which was the trigger for this thread. The 
1.7 is multi-threaded and may run faster - especially for statistics.

        - Peter

> 
> I tried nfsen-ng a couple of times, but its interface behaves in weird ways 
> (weird to me anyway), compared to the simple and predictable approach of
> nfsen.
> 
> 
> 
> 
> _______________________________________________
> Nfsen-discuss mailing list
> Nfsen-discuss@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
> 


-- 
Be nice to your netflow data. Use NfSen and nfdump :)


_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss