[154099] in North American Network Operators' Group
Re: Collecting flows at an IXP
daemon@ATHENA.MIT.EDU (Harry Hoffman)
Tue Jun 26 09:40:27 2012
Date: Tue, 26 Jun 2012 09:38:50 -0400
From: Harry Hoffman <hhoffman@ip-solutions.net>
To: nanog@nanog.org
In-Reply-To: <4FE94C77.9040006@apolix.co.za>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Hi Graham,
Have you had a look at Argus? http://www.qosient.com/argus/
It works well for us and they have very active support community to boot!
Cheers,
Harry
On 06/26/2012 01:45 AM, Graham Beneke wrote:
> Hi All
>
> I'm busy doing some digging to find a solution for collecting layer-2
> flows data on a medium sized IXP. All we have at the moment is some MRTG
> graphs and we're trying to get a better view into IPv4 vs IPv6, src and
> dst MACs, packet sizes and also perhaps port & protocol trends.
>
> I found Richard A. Steenbergen's NANOG 39 presentation and not much
> since then.
>
> Is it still correct that Cisco does not support sFlow?
>
> Are you able to get the same kind of useful data using Netflow v9?
>
> Which FOSS flow collectors do an decent/adequate job at crunching about
> 10Gbps worth of flows and presenting it in a useful way?
>
> Thanks
