[c-nsp] ipflow/netflow appliance

Adam Powers apowers at lancope.com
Mon Jan 14 15:56:40 EST 2008


I can attest to this. nProbe is your best bet for a ³virtual NetFlow
exporter². It performs well and has tons of export formats and features. We
use it extensively for QA and testing. You do, however, have to pay a bit
for it whereas fprobe and others are free.


On 1/11/08 11:28 AM, "Petreski, Samuel" <samuel-petreski at uiowa.edu> wrote:

> nProbe by ntop.org is pretty robust tool for generating v5/v9 flows and
> fairly inexpensive.
> 
> http://www.ntop.org/nProbe.html
> 
> --Samuel
> 
> Samuel Petreski
> Sr. Security Analyst
> CIO Office
> University of Iowa
> 
> 
> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net
> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Stefan Hegger
> Sent: Friday, January 11, 2008 8:44 AM
> To: cisco-nsp at puck.nether.net
> Subject: [c-nsp] ipflow/netflow appliance
> 
> Hi,
> 
> I'm looking for a device that can provide us with ipflow/netflow data. Our
> router isn't able to manage the netflows for a 10G connection. We have a
> catalyst 6500 with a sup 720. As far as I know it supports up to 128000
> table
> entries. This is too small. So we are looking for a device that sniffer the
> traffic via SPAN and than generates the tables we need for analysis. Does
> someone know about such a device?
> 
> 
> Best Stefan
> --
> Stefan Hegger
> Internet System Engineer
> 
> Lycos Europe GmbH
> Carl-Bertelsmann Str. 29
> Postfach 315
> 33312 Gütersloh
> 
> Phone:
> Tel: +49 5241 8071 334
> Fax: +49 5241 80671 334
> Mobile: +49 170 1892720
> 
> Sitz der Gesellschaft: Gütersloh
> Amtsgericht Gütersloh, HRB 2157
> Geschäftsführer: Christoph Mohn
> 
>   <http://www.lycos-europe.com/L/A/>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/



-- 

Adam  Powers
Chief Technology Officer
Lancope, Inc.
c. 678.725.1028
f. 678.302.8744
e. adam at lancope.com



More information about the cisco-nsp mailing list