<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">NTopng isn’t bad but be aware of your underlying hardware when dealing with traffic volumes above a few Gbit. You’ll need to be conscious of NUMA node assignment and NIC drivers.</div><div class="">I would suggest you look into PF_RING ZC as well (<a href="http://www.ntop.org/products/packet-capture/pf_ring/pf_ring-zc-zero-copy/" class="">http://www.ntop.org/products/packet-capture/pf_ring/pf_ring-zc-zero-copy/</a>) due to NIC interrupts.</div><div class=""><br class=""></div><div class="">PMacct is another good one.</div><div class=""><br class=""></div><div class="">- Tim</div><br class=""><div><blockquote type="cite" class=""><div class="">On 20 Sep 2017, at 9:48 am, Dave Browning <<a href="mailto:dave@sentrian.com.au" class="">dave@sentrian.com.au</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">Hi All,<br class=""><br class="">Just chasing people’s recommendations for a good carrier/ISP grade Netflow collector & analyser. Have had a play with ntopng & nprobe and so far is looking the goods.<br class=""><br class="">Cheers,<br class="">Dave<br class=""><br class="">Dave Browning | Network Engineer<br class="">P 1300 791 678<br class="">Level 1, 12 Railway Tce, Milton QLD 4064<br class="">_______________________________________________<br class="">AusNOG mailing list<br class=""><a href="mailto:AusNOG@lists.ausnog.net" class="">AusNOG@lists.ausnog.net</a><br class="">http://lists.ausnog.net/mailman/listinfo/ausnog<br class=""></div></div></blockquote></div><br class=""></body></html>