IP Transit with netflow report?

Mailman List Mirror (Read Only)
1

Hi Everyone,

Hope someone can help me out.. I have some IP Transit links with one of the
Tier1s and I need to know the source<>destination of traffic passing
though.. My provider gives me a straight "NO, we can provide this" and I am
wondering if anyone knows of any providers who gives out netflow report?

Cheers,
AB

2

Hope someone can help me out.. I have some IP Transit links with one of the
Tier1s and I need to know the source<>destination of traffic passing
though.. My provider gives me a straight "NO, we can provide this" and I am
wondering if anyone knows of any providers who gives out netflow report?

would be very unusual. export it from your router.

randy

3

Why cant you do the netflow from your end?

4

None that I've ever head of. Export netflow from your router. It'll be
the same data.

~Seth

5

nfdump + NfSen

Do it yourself.

6

+1

Do it yourself :slight_smile:

You can have a look at As-Stats. It's easy to install and maintain

https://neon1.net/as-stats/

Regards,

7

Scrutinizer!

8

Ya, thks for the suggestion... been using Arbor and like the flexibility of
doing different reports on the fly. But, it is costing too much and newer
box only allow 5 routers?!! Having some hard time trying to get the
resources to do it in-house, as you guys know, mgmt loves to say forget it
and press the provider to give us..

Is there anyone out there providing such a thing as netflow-as-a-service?

9

+1

Use it, love it. Opened eyes on how much "social media traffic" (amongst other things) goes on on a daily basis.

EKG

10

Consider also FlowViewer w/ flow-tools. You can set up long-term graphs of
any filtered traffic you like (e.g., by AS, by IP range, by service (ie
port), or any combination, etc.) Keeps stats like peak, average, etc. (just
like MRTG, only for the filtered set of your choice.) Has an email alert
capability when usage crosses a max or min threshold.

Quick, easy install.

http://ensight.eos.nasa.gov/FlowViewer

Joe

11

From: Eric Germann
Sent: Monday, February 13, 2012 5:41 PM
To: George Bonser
Cc: nanog@nanog.org
Subject: RE: IP Transit with netflow report?

+1

Use it, love it. Opened eyes on how much "social media traffic"
(amongst other things) goes on on a daily basis.

EKG

And it works with sflow devices, too. As a special added treat, the latest nfdump package in Debian sid comes with the sflow tools (yay! No more recompiling the package from source!) and it should be migrating to your favorite Debian derivative soon-ish (Ubuntu?).

12

+1 for Scrutinizer, but to be fair a lot of our former students work there.