[c-nsp] Netflow tools

[Roland Dobbins]

On May 19, 2009, at 3:05 AM, Werner Detter wrote:

> we use http://nfsen.sourceforge.net/

nfsen/nfdump is a great open-source tool - I *think* it supports  
sampling, now (anyone?).

Stager is cool, too, though last I checked it didn't support v9  
(again, correction welcome; it's dependent upon the flow-tools for  
collection).

The easiest/quickest one to get up and running is probably ntop (it  
supports NetFlow, in addition to deriving statistics via packet- 
capture).

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

         Unfortunately, inefficiency scales really well.

		   -- Kevin Lawton