[AusNOG] NetFlow Recommendations

[Tim Raphael]

NTopng isn’t bad but be aware of your underlying hardware when dealing with traffic volumes above a few Gbit. You’ll need to be conscious of NUMA node assignment and NIC drivers.
I would suggest you look into PF_RING ZC as well (http://www.ntop.org/products/packet-capture/pf_ring/pf_ring-zc-zero-copy/ <http://www.ntop.org/products/packet-capture/pf_ring/pf_ring-zc-zero-copy/>) due to NIC interrupts.

PMacct is another good one.

- Tim

> On 20 Sep 2017, at 9:48 am, Dave Browning <dave at sentrian.com.au> wrote:
> 
> Hi All,
> 
> Just chasing people’s recommendations for a good carrier/ISP grade Netflow collector & analyser. Have had a play with ntopng & nprobe and so far is looking the goods.
> 
> Cheers,
> Dave
> 
> Dave Browning | Network Engineer
> P 1300 791 678
> Level 1, 12 Railway Tce, Milton QLD 4064
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20170920/3b2fce2a/attachment.html>