[c-nsp] Open Source netflow recommendations

[Justin M. Streiner]

On Tue, 17 May 2011, Lee Starnes wrote:

> Does anyone have any recommendations for an open source netflow solution? If
> there is nothing out there, what is recommended in the non-open source
> world? Are there any to absolutely stay away from?

The answer to that question would depend on what you want to do with the 
Netflow data you collect.  If you're mainly interested in generating 
graphs and top-talker reports, NFSen/NFDump is a very usable option.

If you're looking for something that does more than that, then you're 
getting into the realm of commercial applications.

Another increasingly important question is if you want or need Netflow 
v9/v10 (IPFIX) support, to get Netflow data for IPv6 traffic.  This 
becomes important, not only in terms of gauging the capabilities of your 
Netflow collection/analysis setup, but also determining features and 
pricing for new router hardware/software/licensing.  Both Cisco and 
Juniper are moving toward a model where certain features need to be 
individually licensed and activated, or additional hardware needs to be 
purchased (Juniper's Multiservices PICs/MPCs for the M/MX platforms comes 
to mind).

jms