-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Roland et al,

> On May 19, 2009, at 3:05 AM, Werner Detter wrote:
> > we use http://nfsen.sourceforge.net/
>
> nfsen/nfdump is a great open-source tool - I *think* it supports  
> sampling, now (anyone?).

The stable version does not (yet), However, I'm currently testing the next 
snapshot to be released next week or so, it
will recognise sampling and lots of more v9 elements such as vlan and MPLS 
labels, MAC addresses, next hop IPs etc. It
will also support FNF on collector level.

Testers are welcome! :)

        - Peter

> 
> Stager is cool, too, though last I checked it didn't support v9  
> (again, correction welcome; it's dependent upon the flow-tools for  
> collection).
> 
> The easiest/quickest one to get up and running is probably ntop (it  
> supports NetFlow, in addition to deriving statistics via packet- 
> capture).


- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag,  Security Engineer,  Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA  FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box,  CH-8021   Zurich, Switzerland
E-mail: peter.h...@switch.ch Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iQCVAwUBShJiH/5AbZRALNr/AQKjbgP/SPrjsgDWHVCGcqqoh+W9EqUNE+Y2T/Xs
zU6Hmh4h/G0ukINg41DrWmKAxIMMPOGSvyI8qI2NLEXLOwpuX0hlhS/xfRAvCbWA
eoCgSuu7J1qOIhHO3wNOkW4vcIXWQKwSdL9Sh1Pc9kiF/vDkMniTXWNH6bvUtsFe
2xZpGiGP814=
=FI3I
-----END PGP SIGNATURE-----
_______________________________________________
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to