[c-nsp] Traffic Analyzing?

[Giles Coochey]

> Sure..
> 	Check out stager http://software.uninett.no/stager  or
FlowViewer
> http://ensight.eos.nasa.gov/FlowViewer/ coupled with netflow data
> exports..
> both have nice web front ends to allow you to slice and dice your
netflow
> data. Of course your router will need full routes so it knows prefixes
and
> destination ASN#.
> 

I worked with flow-tools and nfsen/nfdump when I worked for a company
without much of a budget assignment for traffic analysis.
They are both great tools, but suffer from the usual open source
drawbacks - difficult to get going, little to no documentation and while
the mailing lists were a great help there was no guarantee of getting
support in a timely manner.

I've since installed Fluke's Netflow Tracker (Formerly by Crannog
Software) and would say that if you can afford it, it's very much worth
it - easy to get going, little to no fiddling around, extremely
flexible, excellent documentation and guaranteed commercial support.