[AusNOG] opensource netflow recommendations

[Sean K. Finn]

Have a look at Observium

http://www.observium.org/wiki/Main_Page

I haven't  configured it for my routing yet, but, it pulls SNMP info for hosts together with SNMP info for switches

It's soooo low config, once its running, which is fairly straightforward, you just run a few commands for each host, and Observium auto-discovers, AND keeps up to date, on all mib indexes that it thinks it should be watching.

It's really good for alerting you on switch ports that go down, or are unaccessible.

It monitors BGP Sessions and session state and neighbor availability.

And, I'm imagining, the flow information that it will provide will be nothing less than exceptional.

If you're not already using it, and if it's not exactly what you're after, you'll still wonder how you ever lived without it.

It's not the be-all and end-all, but its definitely where my eyeballs go first to see whats happening.



From: ausnog-bounces at lists.ausnog.net [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Leighton Weymouth
Sent: Tuesday, June 12, 2012 2:56 PM
To: ausnog at lists.ausnog.net
Subject: [AusNOG] opensource netflow recommendations


Hi All,



Can anyone recommend a good opensource netflow collector/analyiser?



I've tried nTop, but it seems to lack functionality to be able to drill down to see whats happening at specific times.



Thanks,

Leighton.




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20120612/19eef5e9/attachment.html>