Re: Traffic Flow Analyzer

This topic comes up from time to time. You might find a collection of
options from the last time I remember it discussed on list:

  <https://mailman.nanog.org/pipermail/nanog/2022-January/thread.html#217354&gt;

John

Hi,

For those who may still be interested in this topic, we have had very good experiences with elastiflow. The data is delivered from Juniper switches via ipfix and the elastiflow server was simply set up using docker. Two instructions were very helpful here:

Elastiflow itself once had a nice article from-zero-to-flow-setting-up-elastiflow-in-minutes, but it is no longer available on their blog. But this article seems to build it the same way.

Best regards
Sven