[f-nsp] Sflow and/or measurement

[Howard Jones]

Cliff Fogle wrote:

>If I remember correctly there is no hardware sflow sampling in IronCore.
>Your only option then is an external host running an sflow probe, and
>mirror ports.  InMon makes one:
>
>http://www.inmon.com/products/probes.php
>
>I use InMon's Traffic Server...it's pretty fantastic once you learn to
>use it.  I do wish it was a little more 'open'.  I would love to access
>whatever dB they use with my own scripts.
>
>Last I checked NTOP had some very limited sflow reporting, using the
>sflow-tools freely distributed by InMon, it was pretty minimal though:
>http://www.ntop.org
>  
>
If it doesn't *have* to be sflow, then there are several free 
netflow-based solutions using port mirroring and a unix box. I have had 
some success with FreeBSD and it's ng_netflow module with flow-tools, 
for instance. I believe ntop can collect netflow data too, as can nprobe.

Best Regards,

Howard