[c-nsp] Flow tools

Patrick Cole z at amused.net
Wed Jan 18 06:28:38 EST 2012


Nick,

Yes it can as long as the netflow data it receives has AS info in it.

nfdump can filter based on AS from its data stores, and nfsen is just
a graphing program/wrapper interface around nfdump so it can display
graphs of anything nfdump can filter with basically.

Patrick


Wed, Jan 18, 2012 at 10:38:49AM +0000, Nick Ryce wrote:


> Can nfdump/nfsen show useage per AS number as I cannot see anything on their site?
> 
> Nick
> 
> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Dobbins, Roland
> Sent: 18 January 2012 06:14
> To: Cisco NSP
> Subject: Re: [c-nsp] Flow tools
> 
> 
> On Jan 17, 2012, at 11:23 PM, John Brown wrote:
> 
> > 6506-E Sup720-3BXL.
> 
> The NetFlow you get from this box won't be operationally useful - many caveats.  Strongly suggest a move to Sup2T and DFC4 (where applicable), if you want good NetFlow from 6500s.
> 
> nfdump/nfsen is a good open-source set of tools to use in getting started with flow telemetry, IMHO.
> 
> -----------------------------------------------------------------------
> Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>
> 
>                 The basis of optimism is sheer terror.
> 
>                           -- Oscar Wilde
> 
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
> --
> 
> This email and any files transmitted with it are confidential and intended
> solely for the use of the individual or entity to whom they are addressed.
> If you have received this email in error please notify the sender. Any
> offers or quotation of service are subject to formal specification.
> Errors and omissions excepted.  Please note that any views or opinions
> presented in this email are solely those of the author and do not
> necessarily represent those of Lumison.
> Finally, the recipient should check this email and any attachments for the
> presence of viruses.  Lumison accept no liability for any
> damage caused by any virus transmitted by this email.
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 


More information about the cisco-nsp mailing list