[154114] in North American Network Operators' Group
Re: Collecting flows at an IXP
daemon@ATHENA.MIT.EDU (virendra rode)
Tue Jun 26 16:32:33 2012
Date: Tue, 26 Jun 2012 13:31:41 -0700
From: virendra rode <virendra.rode@gmail.com>
To: nanog@nanog.org
In-Reply-To: <4FE94C77.9040006@apolix.co.za>
Reply-To: virendra.rode@gmail.com
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hi,
On 06/25/2012 10:45 PM, Graham Beneke wrote:
> Hi All
>
> I'm busy doing some digging to find a solution for collecting
> layer-2 flows data on a medium sized IXP. All we have at the moment
> is some MRTG graphs and we're trying to get a better view into IPv4
> vs IPv6, src and dst MACs, packet sizes and also perhaps port &
> protocol trends.
>
> I found Richard A. Steenbergen's NANOG 39 presentation and not
> much since then.
>
> Is it still correct that Cisco does not support sFlow?
>
> Are you able to get the same kind of useful data using Netflow v9?
>
> Which FOSS flow collectors do an decent/adequate job at crunching
> about 10Gbps worth of flows and presenting it in a useful way?
>
> Thanks
- -------------------
Another option to consider would be nfsen/nfdump..running nicely as a
plugin under cacti so we get a central view.
regards,
/virendra
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iF4EAREIAAYFAk/qHC0ACgkQ3HuimOHfh+FioQD/Qs7/fje8hziGEym2Wh0sIDWI
16p7ZC+6cJnUUGHzPJsA/jzn0/iCwDCFO8UKSjkXuEpwysRo8U/WeZpTKcbzvhHN
=k2E2
-----END PGP SIGNATURE-----
