Re: Spiffy Netflow tools?

2018-03-13 Thread Babak Farrokhi

Plixer is also interesting.

nfdump works great with NetFlow but support for IPFIX is somehow limited 
to basics.



--
Babak


On 13 Mar 2018, at 3:20, Fredrik Korsbäck wrote:


On 2018-03-13 00:24, mike.l...@gmail.com wrote:

Howdy!

Checking out various Netflow tools and wanted to see what others are 
using?


Kentik is cool. Are they the only SaaS based flow digester? I don’t 
seem to see any others.


Also curious about on-prem solutions as well.

Thanks!
Mike



Kentik is probably top of the foodchain right now.

But they are certainly not alone in the biz. Ontop of my head...

* Flowmon
* Talaia
* Arbor Peakflow
* Deepfield
* Pmacct + supporting toolkit
* NFsen/Nfdump/AS-stats
* Put kibana/ES infront of any collector
* Solarwinds something something
* Different vendor toolkits



--
hugge


Re: spamassassin hole again?

2014-04-12 Thread Babak Farrokhi
We are not using spamasassin and only major RBLs in place and seeing the same 
wave of spam. Seems like a new botnot has just appeared. 

-- Babak

-- 
Babak Farrokhi

 On Apr 13, 2014, at 8:09 AM, Randy Bush ra...@psg.com wrote:
 
 massive porn spam is making it through spamassassin.  new filter oops?
 
 randy, still researching
 



Re: Your Christmas Bonus Has Arrived

2011-12-13 Thread Babak Farrokhi
Is there a comapny behind that gmail mailbox? And they could make a deal with 
MS  Borders using the same mailbox?

-- 
Babak Farrokhi

On Dec 14, 2011, at 9:10 AM, Patrick W. Gilmore patr...@ianai.net wrote:

 On Dec 13, 2011, at 11:56 PM, Justin M. Streiner wrote:
 On Wed, 14 Dec 2011, Matt Taylor wrote:
 On 14/12/2011 2:13 PM, IPv4 Brokers wrote:
 We are paying up-front (or escrow) for the use of networks that are not
 used.  The networks are used for honeypots and other research.
 
 The networks may be used for a month or longer, you are paid an agreed
 upon price per each month of use.
 
 We do require a minimum of /24.
 
 Sounds like another middleman for 'bulletproof' hosting services for people 
 who generally are up to no good.
 
 I believe this company is the one that sold the MS  Borders blocks, so they 
 may be legit (whatever that means in this context).
 
 Also, they may be using a GMail account because it is likely they crossed 
 some line with people (perhaps even the NANOG mail admins) and need a 
 disposable account.
 
 Or maybe they really are running their business off *@gmail.com
 
 -- 
 TTFN,
 patrick
 
 



Re: Network Asset/Service Track/Management

2011-11-01 Thread Babak Farrokhi
Hi,

I would suggest you use the element management software provided by your 
vendor. But you may want to take a look at www.ziptie.org for an alternative.

Regards,

On Nov 1, 2011, at 10:29 AM, Payam Poursaied wrote:

 Hi all
 
 I'm looking for a system to keep track of network assets and also periodic 
 services in each pop site. Currently we have
 about 500 pop-sites. In each site we have DSLAMs, Linecards and also some 
 passive equipments including terminals, racks
 and ..
 
 Also each site may have some recurring fees/services. Something like transit 
 link, power, rental space and .
 
 
 
 Could you please share your experience with me
 
 
 
 Best Regards
 
 Payam Poursaied
 
 
 

-- 
Babak Farrokhi
Network Expert / Unix SA / Security Analyst