[c-nsp] Open Source netflow recommendations

sthaug at nethelp.no sthaug at nethelp.no
Wed May 18 15:18:55 EDT 2011


> If vendors start playing games with license fees per feature (to pad their
> revenues), then one either conform or work-around them.  If this pertains to
> netflow, I've done something like the following in the past:
> * span traffic to pkt collector
> * on pkt collector, run something like "fprobe" to convert raw pkt to flow
> format
> * export flow to said flow collector

You then have the problems of packet rates (unless you can get sampling
before spanning to the traffic collector) plus you lose ifIndex, which
for some of us is rather important.

In other words, not a solution for all of us.

Steinar Haug, Nethelp consulting, sthaug at nethelp.no


More information about the cisco-nsp mailing list