[c-nsp] cisco-nsp Digest, Vol 78, Issue 52

[Peter Haag]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Roland et al,

> On May 19, 2009, at 3:05 AM, Werner Detter wrote:
> > we use http://nfsen.sourceforge.net/
>
> nfsen/nfdump is a great open-source tool - I *think* it supports  
> sampling, now (anyone?).

The stable version does not (yet), However, I'm currently testing the next snapshot to be released next week or so, it
will recognise sampling and lots of more v9 elements such as vlan and MPLS labels, MAC addresses, next hop IPs etc. It
will also support FNF on collector level.

Testers are welcome! :)

	- Peter

> 
> Stager is cool, too, though last I checked it didn't support v9  
> (again, correction welcome; it's dependent upon the flow-tools for  
> collection).
> 
> The easiest/quickest one to get up and running is probably ntop (it  
> supports NetFlow, in addition to deriving statistics via packet- 
> capture).


- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag,  Security Engineer,  Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA  FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box,  CH-8021   Zurich, Switzerland
E-mail: peter.haag at switch.ch Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iQCVAwUBShJiH/5AbZRALNr/AQKjbgP/SPrjsgDWHVCGcqqoh+W9EqUNE+Y2T/Xs
zU6Hmh4h/G0ukINg41DrWmKAxIMMPOGSvyI8qI2NLEXLOwpuX0hlhS/xfRAvCbWA
eoCgSuu7J1qOIhHO3wNOkW4vcIXWQKwSdL9Sh1Pc9kiF/vDkMniTXWNH6bvUtsFe
2xZpGiGP814=
=FI3I
-----END PGP SIGNATURE-----