We use, depending on the situation, Intermapper, PRTG, and NTop. 

Intermapper has the most powerful viewing app, but it’s expensive in that you 
have to pay for each flow collector. It’s an actual app (Windows, Mac, and 
Linux), rather than a web-based interface, so they can do more tricks with the 
GUI, like drill down and sorting.

PRTG includes its web-based flow collector and viewer for free, and there is 
even a free 100-sensor edition of the product that lets you use just the flow 
stuff fir free forever.

NTop is an open source web-based flow sensor and viewer, with a combo paid 
license model specifically for the flow collection. It connects directly to a 
mirror port and sucks up the flow info, where is the other products required to 
have some hardware device that exports flows. But you can get dirt cheap used 
Cisco routers that do this, such as the 1941, which although bulky do the job 
for a few hundred bucks. Once you get into 10 Gb speeds though you need 
dedicated hardware sensors in newer gear, which is pretty pricey. But if you 
have 10 Gb traffic you can afford it :-)

Ntop also has a commercial arm called Nbox, Which has a range of hardware based 
ready to go solutions. However it’s all supported out of Italy, and pretty much 
by one guy, so we’ve had uneven results with customers that purchased it.

-mel

> On Jan 25, 2022, at 8:30 AM, Laura Smith via NANOG <nanog@nanog.org> wrote:
> 
> On Tuesday, January 25th, 2022 at 15:46, David Bass <davidbass...@gmail.com> 
> wrote:
> 
>> Wondering what others in the small to medium sized networks out there are 
>> using these days for netflow data collection, and your opinion on the tool?
>> 
>> Thanks!
> 
> 
> Not a suggestion, but a question ....
> 
> Curious to know if anyone (apart from Cloudflare, obvs !) is using Goflow ? 
> (https://github.com/cloudflare/goflow)

Reply via email to