[afnog] NetFlow Statistics Collector
Phil Regnauld
regnauld at x0.dk
Thu Jan 18 13:16:42 UTC 2007
Jeroen Massar (jeroen) writes:
>
>
> Every tool comes at a different price (some 100K+ US ;) and has
> different things it can do. As such there is not an easy way to say "get
> this as it does what you want". If you can tell what exactly you are
> trying to measure or figure out, then I can probably hint you which apps
> are most suited for your needs.
>
> Most of them are SUSE based, most of them though are also commercial.
> Check the SWITCH url for quite some non-commercial ones too.
Just a note:
Unless you know *precisely* what you are looking for, I would suggest
to start with open source tools, to grasp the concepts of netflow,
what it can and cannot do.
Only then does it make sense to buy a product from a vendor who, it
is our experience, knows less than you do about the technology
(we developed netflow analyzers, we should know :)
Note that FreeBSD has a built-in ng_netflow module which allows it
to act as a probe as well. Very useful with span port / port mirroring
on a decent switch.
More information about the afnog
mailing list