[afnog] Data mining for African ISP

[Mark Tinka]

On Sunday 22 March 2009 03:30:42 am Global One Solutions 
wrote:

> I would like to hear what our local ISP in African is
> using for data-mining, which helps them deal  with (a)
> with DDoS attack, (b) Understand their traffic pattern,
> which helps them plan their capacity planning.  I know
> DDoS attack is very critical to the operation folks and
> some of us used or still use home grown application. You
> can buzz offline if you want to. Any feedback is greatly
> appreciated.

These are typical applications of NetFlow/cflowd in IOS and 
JunOS.

There's a lot of non-commercial flow collectors, e.g., 
Nfsen/Nfdump, as well as commercial products that work quite 
well, e.g., Arbor Networks.

Other folks may use NTOP for the same, as well.

Cheers,

Mark.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 835 bytes
Desc: This is a digitally signed message part.
URL: <http://afnog.org/pipermail/afnog/attachments/20090322/cff676d9/attachment.bin>