[c-nsp] ipflow/netflow appliance

[Gert Doering]

Hi,

On Fri, Jan 11, 2008 at 10:28:28AM -0600, Petreski, Samuel wrote:
> nProbe by ntop.org is pretty robust tool for generating v5/v9 flows and
> fairly inexpensive.
> 
> http://www.ntop.org/nProbe.html

Has any of you done a reality-check before recommending these tools,
whether one of them can actually *handle* a 10G-link?

Sniffing 10G without losing packets is *hard*.

Sniffing 10G and doing any sort of math with it is *very hard*.

Any "sniff packets and do flow exports from there" application that 
aims to do better than the flow hardware on the PFC3 needs to be really,
really, *really* good.

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 304 bytes
Desc: not available
Url : https://puck.nether.net/pipermail/cisco-nsp/attachments/20080115/7f12a6ec/attachment.bin