[132117] in North American Network Operators' Group
Re: flow analysis for juniper devices
daemon@ATHENA.MIT.EDU (bas)
Mon Nov 15 18:33:42 2010
In-Reply-To: <20101114031755.GS92522@gerbil.cluepon.net>
Date: Tue, 16 Nov 2010 00:33:37 +0100
From: bas <kilobit@gmail.com>
To: Richard A Steenbergen <ras@e-gerbil.net>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Hi,
On Sun, Nov 14, 2010 at 4:17 AM, Richard A Steenbergen <ras@e-gerbil.net> wrote:
> On Sun, Nov 14, 2010 at 12:07:40PM +1000, Mehmet Akcin wrote:
>> any recommendations on freeware flow analysis tool which can show the
>> flow not only per prefix basis but also show asn and/or country/region
>> as well? Juniper only.
>>
>> feel free to contact on/off list.
>
> Juniper's flow export is just like everyone else's (*), so any tool will
> do the same thing. Country/region analysis would depend on third party
> geolocation services, which have nothing to do with netflow. :)
>
> (*) Well, except M/T/MX only support NetFlow v5/v8 in the free software
> based sampling mode, you need an expensive services card and software
> license to do v9 for some reason.
Shouldn't there be a (**)
(**) Also Except for MX'es with trio chipsets. These can do
inline-jflow that export to IPFIX (modified netflow v9)
All of the open source collector solutions I've tried that can handle
v9 cannot handle IPFIX from the trio cards.
Richard; Do you have something that handles IPFIX?
Bas
