Re: Collecting flows at an IXP

2012-06-26 Thread virendra rode
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, On 06/25/2012 10:45 PM, Graham Beneke wrote: > Hi All > > I'm busy doing some digging to find a solution for collecting > layer-2 flows data on a medium sized IXP. All we have at the moment > is some MRTG graphs and we're trying to get a better

Re: Collecting flows at an IXP

2012-06-26 Thread Harry Hoffman
Hi Graham, Have you had a look at Argus? http://www.qosient.com/argus/ It works well for us and they have very active support community to boot! Cheers, Harry On 06/26/2012 01:45 AM, Graham Beneke wrote: Hi All I'm busy doing some digging to find a solution for collecting layer-2 flows data

Re: Collecting flows at an IXP

2012-06-26 Thread Nick Hilliard
On 26/06/2012 07:06, Graham Beneke wrote: > Just to clarify - there are 3 switch fabrics involved here. One from vendor > C, one from vendor J and a third new fabric from an unchosen vendor. > > So ideally something that can accept the flows from various vendors. > > I'm also hoping for some insi

Re: Collecting flows at an IXP

2012-06-25 Thread Graham Beneke
On 26/06/2012 07:45, Graham Beneke wrote: Which FOSS flow collectors do an decent/adequate job at crunching about 10Gbps worth of flows and presenting it in a useful way? Just to clarify - there are 3 switch fabrics involved here. One from vendor C, one from vendor J and a third new fabric fro

Collecting flows at an IXP

2012-06-25 Thread Graham Beneke
Hi All I'm busy doing some digging to find a solution for collecting layer-2 flows data on a medium sized IXP. All we have at the moment is some MRTG graphs and we're trying to get a better view into IPv4 vs IPv6, src and dst MACs, packet sizes and also perhaps port & protocol trends. I foun