Re: Free-ish Linux Netflow collector/analyser options

2022-05-17 Thread Peter Phaal
Juniper added sFlow support to MX routers in Junos 18.1R1, https://blog.sflow.com/2018/04/sflow-available-on-juniper-mx-series.html You might want to consider deploying sFlow instead of IPFIX, particularly if you are interested in DDoS mitigation where low latency and visibility into packet header

Re: [EXTERNAL] Re: Free-ish Linux Netflow collector/analyser options

2022-05-17 Thread Compton, Rich A
m: NANOG on behalf of Joe Loiacono Date: Monday, May 16, 2022 at 1:11 PM To: NANOG list , Matthew Crocker Subject: [EXTERNAL] Re: Free-ish Linux Netflow collector/analyser options CAUTION: The e-mail below is from an external source. Please exercise caution before opening attachments, clicki

Re: Free-ish Linux Netflow collector/analyser options

2022-05-16 Thread John Kristoff
On Mon, 16 May 2022 18:34:29 + Matthew Crocker wrote: > I’m looking for a free-ish Linux open sources Netflow > collector/analyser. [...] There was a long thread back in January that I think will provide you many of the suggestions you're seeking. If you haven't seen it, it starts here: <

Re: Free-ish Linux Netflow collector/analyser options

2022-05-16 Thread Joe Loiacono
Try FlowViewer (analyzing, graphing, tending software) + SiLK (robust, high-performance capture software from Carnegie-Mellon). Pretty full netflow analysis package; free. See: http://flowviewer.net Joe On 5/16/2022 2:34 PM, Matthew Crocker wrote: I’m looking for a free-ish Linux open sourc

Free-ish Linux Netflow collector/analyser options

2022-05-16 Thread Matthew Crocker
I’m looking for a free-ish Linux open sources Netflow collector/analyser. I have 5 Juniper MX routers that will send IPFIX flows to for an ISP network. I’m hoping it is something I can run in AWS/EC2 as I don’t want to worry about storage again in my lifetime. Does anyone have any recommen