[AusNOG] Netflow, probes and data retention compliance

[Philip Loenneker]

Hi Narelle,

>From memory, when our data retention compliance documentation was accepted by CAG they included a statement discouraging sharing of the content of the policy with people outside of our organisation and CAG, stating that sharing details could invalidate their acceptance. This may have more than a little to do with the lack of responses you have received. 

That said, the ability to achieve what organisations commit to in their data retention agreement often relies on support in the equipment used, and capturing flows appears to be the most widely supported method of capturing that information. Some devices may handle alternate (perhaps better) methods, but if you run a multi-vendor environment, I think most people would choose a method common across all devices rather than having to deal with multiple systems or exceptions.

Regards,
Philip Loenneker | Network Engineer | TasmaNet
40-50 Innovation Drive, Dowsing Point, Tas 7010, Australia
P: 1300 792 711
philip.loenneker at tasmanet.com.au
www.tasmanet.com.au

-----Original Message-----
From: AusNOG <ausnog-bounces at lists.ausnog.net> On Behalf Of Narelle Clark
Sent: Tuesday, 25 September 2018 12:00 PM
To: ausnog at ausnog.net <ausnog at lists.ausnog.net>
Subject: Re: [AusNOG] Netflow, probes and data retention compliance

Hi everyone
I got very few replies to my post below requesting info on data retention compliance approaches other than "we use netflow and open flow" and "please post your findings". So people are keen to share this info.

I'm sure there is more being done than that!

If people want to chat offline, email me and I'll send over my phone number or other means of communication for a chat.

Narelle
On Thu, Sep 13, 2018 at 1:18 PM Narelle Clark <narellec at gmail.com> wrote:
>
> Hi folks
> what do people use in the way of probe based systems for your data 
> retention compliance?
>
> I also recall there being netflow based systems for this - can anyone 
> make suggestions of what systems you've used?
>
> Probably best if answers go off list, I can summarise the answers.
>
> Regards
>
> Narelle
>
> --
>
>
> Narelle Clark
> narellec at gmail.com



-- 


Narelle
narellec at gmail.com
_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog