[c-nsp] Flow tools

[Jon Lewis]

On Wed, 18 Jan 2012, John Brown wrote:

> Hi Oh Wise List :)
>
> If one was going to start up collecting netflow data for connectivity / peering / traffic engineering reasons, what tools work well these days.
>
> What shops using to look at top source or dest ASN's
> Track traffic anomalies (ddos, scans, other fun things)

Oddly enough, the package I've been using for years to collect and work 
with flow data is called flow-tools.

> We are needing to track GigE and 10GigE interfaces.  Packet rates are not high yet, but want to have something that reasonably scales.

Are you sure whatever platforms you're using can handle and export that 
volume of netflow?

----------------------------------------------------------------------
  Jon Lewis, MCP :)           |  I route
  Senior Network Engineer     |  therefore you are
  Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________