Re: Open source alternatives to UNINETT Stager for visual netflow peering analysis

2015-04-10 Thread Laurent Dumont
Nfsen is not a very elegant tool. It's very powerful, but it does 
require a fair amount of fiddling in order to get what you want out of it.


On 4/10/2015 12:44 PM, Christopher Morrow wrote:

There's also nfsen to go on top of nfdump ... which can let you create
views of the data showing per-as traffic stats.



On Fri, Apr 10, 2015 at 11:29 AM, Paul S. cont...@winterei.se wrote:

https://github.com/manuelkasper/AS-Stats does that precise job (and nothing
else)


On 4/11/2015 午前 12:24, Peter Kranz wrote:

We've really enjoyed the open source Stager platform for netflow analysis,
however the code has not seen updates in recent years. Looking for
alternative open source netflow analysis platforms with a web interface.
There are quite a few netflow tools around these days, and we are looking
for something that performs the steps needed to showing us traffic volumes
to particular AS#'s and their downstream customers for peering analysis
decisions. I can get coarse answers from nfdump, but would like something
more elegant for the NOC to use.


Peter Kranz
www.UnwiredLtd.com http://www.unwiredltd.com/
Desk: 510-868-1614 x100
Mobile: 510-207-
pkr...@unwiredltd.com mailto:pkr...@unwiredltd.com






--
Laurent Dumont
coldnorthadmin.com



Re: Open source alternatives to UNINETT Stager for visual netflow peering analysis

2015-04-10 Thread Mike Hammett
I got the impression that Peter was looking for it to also do downstream ASes. 
I don't get that impression from the AS-Stats page. 




- 
Mike Hammett 
Intelligent Computing Solutions 
http://www.ics-il.com 



- Original Message -

From: Paul S. cont...@winterei.se 
To: nanog@nanog.org 
Sent: Friday, April 10, 2015 10:29:02 AM 
Subject: Re: Open source alternatives to UNINETT Stager for visual netflow 
peering analysis 

https://github.com/manuelkasper/AS-Stats does that precise job (and 
nothing else) 

On 4/11/2015 午前 12:24, Peter Kranz wrote: 
 We've really enjoyed the open source Stager platform for netflow analysis, 
 however the code has not seen updates in recent years. Looking for 
 alternative open source netflow analysis platforms with a web interface. 
 There are quite a few netflow tools around these days, and we are looking 
 for something that performs the steps needed to showing us traffic volumes 
 to particular AS#'s and their downstream customers for peering analysis 
 decisions. I can get coarse answers from nfdump, but would like something 
 more elegant for the NOC to use. 
 
 
 
 Peter Kranz 
 www.UnwiredLtd.com http://www.unwiredltd.com/ 
 Desk: 510-868-1614 x100 
 Mobile: 510-207- 
 pkr...@unwiredltd.com mailto:pkr...@unwiredltd.com 
 
 
 




Re: Open source alternatives to UNINETT Stager for visual netflow peering analysis

2015-04-10 Thread Joe Loiacono
You could use FlowViewer with the flow-tools underlying collector option 
if you're collecting v5 netflow. This will permit you to keep long-term 
graphs (ala MRTG - Last 24 hours, Last 7 days, etc.) for each AS peer with 
5-minute granularity You can also graph specified time intervals at much 
smaller time-bucket sizes.

FlowViewer has an IPFIX (e.g., v9, FNF, etc.) underlying collector also; 
SiLK. However, last I checked, SiLK is not collecting AS information.

https://sourceforge.net/projects/flowviewer

Regards, 

Joe




From:   Peter Kranz pkr...@unwiredltd.com
To: nanog@nanog.org
Date:   04/10/2015 11:26 AM
Subject:Open source alternatives to UNINETT Stager for visual 
netflow peering analysis
Sent by:NANOG nanog-boun...@nanog.org



We've really enjoyed the open source Stager platform for netflow analysis,
however the code has not seen updates in recent years. Looking for
alternative open source netflow analysis platforms with a web interface.
There are quite a few netflow tools around these days, and we are looking
for something that performs the steps needed to showing us traffic volumes
to particular AS#'s and their downstream customers for peering analysis
decisions. I can get coarse answers from nfdump, but would like something
more elegant for the NOC to use.

 

Peter Kranz
www.UnwiredLtd.com http://www.unwiredltd.com/ 
Desk: 510-868-1614 x100
Mobile: 510-207-
pkr...@unwiredltd.com mailto:pkr...@unwiredltd.com