[AusNOG] NetFlow (or other) options for AS reporting

[David Hughes]

Hi

The king of the heap in my opinion is the kit from Arbor (and they are a great supporter of AusNOG to boot).  I ran up the Peakflow SP product a few years ago and although it's meant to be a security device, the inter-as traffic analysis was fantastic.  Great for determining bilateral peering options etc.

But, as with most things, you get what you pay for and it was considerably more expensive than a bunch of opensource tools cobbled together with a perl script and some duct tape ;-)


Thanks

David
...

On 12/06/2012, at 11:05 PM, Andrew Cox wrote:

> Hi All,
> 
> In a similar vein to the current NetFlow thread; I'm interested to know
> what people recommend for AS traffic tracking over time (free or paid
> options).
> We've run a few different systems all with varying use and uselessness as
> far as AS traffic reports go.
> 
> ntop - shows AS data but:
> a) all AS mappings are out of date and there's no easy way to update them
> b) doesn't show data over time, only since last stats reset
> 
> NetFlow analyser - shows AS data but:
> a) only gives averages over last 24 hours or current volumes
> b) no graphs over time or drill down by AS
> 
> Any recommendations?
> I'd like to be able to track who we're doing the most traffic to and from
> and go back and analyse this over time to see (for example from Pat's email
> last week) who exactly we're seeing or not seeing via a new transit
> provider.
> 
> I'm happy to take responses on or off-list
> 
> Kind Regards,
> Andrew Cox
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog