[c-nsp] NetFlow for Bandwidth Billing

[Phil Mayers]

Roland Dobbins wrote:
> On May 1, 2007, at 10:48 PM, Bill Nash wrote:
> 
>> Flavio will do that out of the box, but I don't like the front end.  
>> Stager
>> is hackable as hell.
> 
> nfdump/nfsen is pretty flexible, as well.

Seconded - nfdump/nfsen are excellent, capable of high volumes and fast. 
Their "pipe" output format is also eminently scriptable, especially 
combined with the aggregation features.

Word of warning - if you have lots of distinct IPs in your flow data, 
you will need to have a large amount of RAM for server-based 
aggregation, unless you arrange to do it in 5-minute chunks.