Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: NANOG: users

NetFlow analyzer software

 

 

NANOG users RSS feed   Index | Next | Previous | View Threaded


mike at m5computersecurity

Oct 19, 2009, 10:43 AM

Post #1 of 11 (1142 views)
Permalink
NetFlow analyzer software

All,
I am looking for decent netflow analyzer and reporting software with good support for AS data.
ManagEngine's product crashes or locks up my browser when I try to list/sort the AS info because it's too large of a list and there is no way to tell it to show just the top x results.
Plixer's Scrutenizer, while it seems like it's a pretty decent product, is no longer supporting Linux... We are a Linux shop (servers, desktops, laptops).
What else is there that I might want to look at?

Thanks!
Mike
M5Hosting.com
Sent from my Verizon Wireless BlackBerry


brwatters at absfoc

Oct 19, 2009, 10:45 AM

Post #2 of 11 (1121 views)
Permalink
RE: NetFlow analyzer software [In reply to]

We have used this product with great success and its reasonable in pricing
and well supported.

http://www.manageengine.com/products/netflow/index.html

BRW



-----Original Message-----
From: mark jackson [mailto:markcciejackson [at] gmail]
Sent: Monday, October 19, 2009 10:47 AM
To: mike [at] m5computersecurity
Cc: nanog [at] nanog
Subject: Re: NetFlow analyzer software

What's up gold
Mrtpg
Scrtinizer
Nagios
Riverbed Cascade
Solarwinds

Sent from my iPhone
Please excuse spelling errors

On Oct 19, 2009, at 10:43 AM, "Michael J McCafferty"
<mike [at] m5computersecurity
> wrote:

> All,
> I am looking for decent netflow analyzer and reporting software
> with good support for AS data.
> ManagEngine's product crashes or locks up my browser when I try to
> list/sort the AS info because it's too large of a list and there is
> no way to tell it to show just the top x results.
> Plixer's Scrutenizer, while it seems like it's a pretty decent
> product, is no longer supporting Linux... We are a Linux shop
> (servers, desktops, laptops).
> What else is there that I might want to look at?
>
> Thanks!
> Mike
> M5Hosting.com
> Sent from my Verizon Wireless BlackBerry
>


chris at uplogon

Oct 19, 2009, 10:46 AM

Post #3 of 11 (1125 views)
Permalink
Re: NetFlow analyzer software [In reply to]

Not sure if this will get you all the info you are looking for, but it's
open source and works well for our needs.

http://nfsen.sourceforge.net/

---- ---- ---- ----
Chris Gotstein, Sr Network Engineer, UP Logon/Computer Connection UP
http://uplogon.com | +1 906 774 4847 | chris [at] uplogon

Michael J McCafferty wrote:
> All,
> I am looking for decent netflow analyzer and reporting software with good support for AS data.
> ManagEngine's product crashes or locks up my browser when I try to list/sort the AS info because it's too large of a list and there is no way to tell it to show just the top x results.
> Plixer's Scrutenizer, while it seems like it's a pretty decent product, is no longer supporting Linux... We are a Linux shop (servers, desktops, laptops).
> What else is there that I might want to look at?
>
> Thanks!
> Mike
> M5Hosting.com
> Sent from my Verizon Wireless BlackBerry
>


markcciejackson at gmail

Oct 19, 2009, 10:46 AM

Post #4 of 11 (1123 views)
Permalink
Re: NetFlow analyzer software [In reply to]

What's up gold
Mrtpg
Scrtinizer
Nagios
Riverbed Cascade
Solarwinds

Sent from my iPhone
Please excuse spelling errors

On Oct 19, 2009, at 10:43 AM, "Michael J McCafferty"
<mike [at] m5computersecurity
> wrote:

> All,
> I am looking for decent netflow analyzer and reporting software
> with good support for AS data.
> ManagEngine's product crashes or locks up my browser when I try to
> list/sort the AS info because it's too large of a list and there is
> no way to tell it to show just the top x results.
> Plixer's Scrutenizer, while it seems like it's a pretty decent
> product, is no longer supporting Linux... We are a Linux shop
> (servers, desktops, laptops).
> What else is there that I might want to look at?
>
> Thanks!
> Mike
> M5Hosting.com
> Sent from my Verizon Wireless BlackBerry
>


sjk at sleepycatz

Oct 19, 2009, 10:50 AM

Post #5 of 11 (1124 views)
Permalink
Re: NetFlow analyzer software [In reply to]

We currently use nfsen - http://nfsen.sourceforge.net/ -- It works
pretty well, not as fancy as others I've worked with, but provides the
basic analytical needs.

Michael J McCafferty wrote:
> All,
> I am looking for decent netflow analyzer and reporting software with good support for AS data.
> ManagEngine's product crashes or locks up my browser when I try to list/sort the AS info because it's too large of a list and there is no way to tell it to show just the top x results.
> Plixer's Scrutenizer, while it seems like it's a pretty decent product, is no longer supporting Linux... We are a Linux shop (servers, desktops, laptops).
> What else is there that I might want to look at?
>
> Thanks!
> Mike
> M5Hosting.com
> Sent from my Verizon Wireless BlackBerry
>


scott at sberkman

Oct 19, 2009, 11:12 AM

Post #6 of 11 (1122 views)
Permalink
RE: NetFlow analyzer software [In reply to]

NetFlow Auditor. The free stuff tends to choke as you add a lot of flow
traffic. It's not free, but if you want support this is a great option.

http://netflowauditor.com/

-Scott

-----Original Message-----
From: Michael J McCafferty [mailto:mike [at] m5computersecurity]
Sent: Monday, October 19, 2009 1:43 PM
To: nanog [at] nanog
Subject: NetFlow analyzer software

All,
I am looking for decent netflow analyzer and reporting software with
good support for AS data.
ManagEngine's product crashes or locks up my browser when I try to
list/sort the AS info because it's too large of a list and there is no way
to tell it to show just the top x results.
Plixer's Scrutenizer, while it seems like it's a pretty decent product,
is no longer supporting Linux... We are a Linux shop (servers, desktops,
laptops).
What else is there that I might want to look at?

Thanks!
Mike
M5Hosting.com
Sent from my Verizon Wireless BlackBerry


mike at m5computersecurity

Oct 19, 2009, 11:36 AM

Post #7 of 11 (1122 views)
Permalink
Re: NetFlow analyzer software [In reply to]

ManageEngine's product is the one that kills browsers because you can tell it to list the top X ASNs.
------Original Message------
From: Brian R. Watters
To: nanog [at] nanog
Cc: nanog [at] nanog
ReplyTo: Brian R. Watters
Subject: RE: NetFlow analyzer software
Sent: Oct 19, 2009 10:45 AM


We have used this product with great success and its reasonable in pricing
and well supported.

http://www.manageengine.com/products/netflow/index.html

BRW



-----Original Message-----
From: mark jackson [mailto:markcciejackson [at] gmail]
Sent: Monday, October 19, 2009 10:47 AM
To: mike [at] m5computersecurity
Cc: nanog [at] nanog
Subject: Re: NetFlow analyzer software

What's up gold
Mrtpg
Scrtinizer
Nagios
Riverbed Cascade
Solarwinds

Sent from my iPhone
Please excuse spelling errors

On Oct 19, 2009, at 10:43 AM, "Michael J McCafferty"
<mike [at] m5computersecurity
> wrote:

> All,
> I am looking for decent netflow analyzer and reporting software
> with good support for AS data.
> ManagEngine's product crashes or locks up my browser when I try to
> list/sort the AS info because it's too large of a list and there is
> no way to tell it to show just the top x results.
> Plixer's Scrutenizer, while it seems like it's a pretty decent
> product, is no longer supporting Linux... We are a Linux shop
> (servers, desktops, laptops).
> What else is there that I might want to look at?
>
> Thanks!
> Mike
> M5Hosting.com
> Sent from my Verizon Wireless BlackBerry
>




Sent from my Verizon Wireless BlackBerry


jloiacon at csc

Oct 19, 2009, 11:42 AM

Post #8 of 11 (1121 views)
Permalink
Re: NetFlow analyzer software [In reply to]

Try opensource flowtools/FlowViewer. All sorts of reports, graphs, and
RRDtool-like long-term series graphs, for AS'es.

The flowtools capture/analyzer software can handle high volumes of netflow
exports from many exporters.

http://ensight.eos.nasa.gov/FlowViewer/

Joe



"Michael J McCafferty" <mike [at] m5computersecurity>
10/19/2009 01:43 PM
Please respond to
mike [at] m5computersecurity


To
"nanog [at] nanog" <nanog [at] nanog>
cc

Subject
NetFlow analyzer software






All,
I am looking for decent netflow analyzer and reporting software with
good support for AS data.
ManagEngine's product crashes or locks up my browser when I try to
list/sort the AS info because it's too large of a list and there is no way
to tell it to show just the top x results.
Plixer's Scrutenizer, while it seems like it's a pretty decent product,
is no longer supporting Linux... We are a Linux shop (servers, desktops,
laptops).
What else is there that I might want to look at?

Thanks!
Mike
M5Hosting.com
Sent from my Verizon Wireless BlackBerry


rubensk at gmail

Oct 19, 2009, 1:37 PM

Post #9 of 11 (1118 views)
Permalink
Re: NetFlow analyzer software [In reply to]

Manage Engine flow receiver with no user sessions viewing statistics
runs at 100% CPU for 200+ Mbps unsampled traffic. It's suited to SMBs
only.

Rubens


On Mon, Oct 19, 2009 at 4:36 PM, Michael J McCafferty
<mike [at] m5computersecurity> wrote:
> ManageEngine's product is the one that kills browsers because you can tell it to list the top X ASNs.
> ------Original Message------
> From: Brian R. Watters
> To: nanog [at] nanog
> Cc: nanog [at] nanog
> ReplyTo: Brian R. Watters
> Subject: RE: NetFlow analyzer software
> Sent: Oct 19, 2009 10:45 AM
>
>
> We have used this product with great success and its reasonable in pricing
> and well supported.
>
> http://www.manageengine.com/products/netflow/index.html
>
> BRW
>
>
>
> -----Original Message-----
> From: mark jackson [mailto:markcciejackson [at] gmail]
> Sent: Monday, October 19, 2009 10:47 AM
> To: mike [at] m5computersecurity
> Cc: nanog [at] nanog
> Subject: Re: NetFlow analyzer software
>
> What's up gold
> Mrtpg
> Scrtinizer
> Nagios
> Riverbed Cascade
> Solarwinds
>
> Sent from my iPhone
> Please excuse spelling errors
>
> On Oct 19, 2009, at 10:43 AM, "Michael J McCafferty"
> <mike [at] m5computersecurity
>  > wrote:
>
>> All,
>>   I am looking for decent netflow analyzer and reporting  software
>> with good support for AS data.
>>   ManagEngine's product crashes or locks up my browser when I try to
>> list/sort the AS info because it's too large of a list and there is
>> no way to tell it to show just the top x results.
>>   Plixer's Scrutenizer, while it seems like it's a pretty decent
>> product, is no longer supporting Linux... We are a Linux shop
>> (servers, desktops, laptops).
>>   What else is there that I might want to look at?
>>
>> Thanks!
>> Mike
>> M5Hosting.com
>> Sent from my Verizon Wireless BlackBerry
>>
>
>
>
>
> Sent from my Verizon Wireless BlackBerry


jnegro at billtrust

Oct 19, 2009, 2:07 PM

Post #10 of 11 (1118 views)
Permalink
RE: NetFlow analyzer software [In reply to]

Yes my experience was the same on with Manage Engine. Although, they do have an article buried in their archives that shows how to tweak the mysql and java memory settings on start of the app. We found that helped a bit. We were successfully using it for netflows from more than 100Mbps, so I would say it can handle a bit more than typical SMB traffic.

I don't know if anyone mentioned it, but a good commercial product a former customer of mine used to use was Solarwinds Orion.

Jeffrey


-----Original Message-----
From: Rubens Kuhl [mailto:rubensk [at] gmail]
Sent: Monday, October 19, 2009 4:38 PM
To: Nanog
Subject: Re: NetFlow analyzer software

Manage Engine flow receiver with no user sessions viewing statistics
runs at 100% CPU for 200+ Mbps unsampled traffic. It's suited to SMBs
only.

Rubens


On Mon, Oct 19, 2009 at 4:36 PM, Michael J McCafferty
<mike [at] m5computersecurity> wrote:
> ManageEngine's product is the one that kills browsers because you can tell it to list the top X ASNs.
> ------Original Message------
> From: Brian R. Watters
> To: nanog [at] nanog
> Cc: nanog [at] nanog
> ReplyTo: Brian R. Watters
> Subject: RE: NetFlow analyzer software
> Sent: Oct 19, 2009 10:45 AM
>
>
> We have used this product with great success and its reasonable in pricing
> and well supported.
>
> http://www.manageengine.com/products/netflow/index.html
>
> BRW
>
>
>
> -----Original Message-----
> From: mark jackson [mailto:markcciejackson [at] gmail]
> Sent: Monday, October 19, 2009 10:47 AM
> To: mike [at] m5computersecurity
> Cc: nanog [at] nanog
> Subject: Re: NetFlow analyzer software
>
> What's up gold
> Mrtpg
> Scrtinizer
> Nagios
> Riverbed Cascade
> Solarwinds
>
> Sent from my iPhone
> Please excuse spelling errors
>
> On Oct 19, 2009, at 10:43 AM, "Michael J McCafferty"
> <mike [at] m5computersecurity
>  > wrote:
>
>> All,
>>   I am looking for decent netflow analyzer and reporting  software
>> with good support for AS data.
>>   ManagEngine's product crashes or locks up my browser when I try to
>> list/sort the AS info because it's too large of a list and there is
>> no way to tell it to show just the top x results.
>>   Plixer's Scrutenizer, while it seems like it's a pretty decent
>> product, is no longer supporting Linux... We are a Linux shop
>> (servers, desktops, laptops).
>>   What else is there that I might want to look at?
>>
>> Thanks!
>> Mike
>> M5Hosting.com
>> Sent from my Verizon Wireless BlackBerry
>>
>
>
>
>
> Sent from my Verizon Wireless BlackBerry


mnagel at willingminds

Oct 21, 2009, 10:36 PM

Post #11 of 11 (1078 views)
Permalink
Re: NetFlow analyzer software [In reply to]

Jeffrey Negro wrote:
> Yes my experience was the same on with Manage Engine. Although, they do have an article buried in their archives that shows how to tweak the mysql and java memory settings on start of the app. We found that helped a bit. We were successfully using it for netflows from more than 100Mbps, so I would say it can handle a bit more than typical SMB traffic.
>
> I don't know if anyone mentioned it, but a good commercial product a former customer of mine used to use was Solarwinds Orion.
>

A bout of research a few years back turned up IBM Aurora
(http://www.zurich.ibm.com/aurora/), now sold as Tivoli/Netcool
(http://www-01.ibm.com/software/tivoli/products/netcool-performance-flow/)
as a potential solution for high performance analysis, but IIRC, a
fairly hefty price tag applied based on traffic volume. Looking at the
second URL, it is not clear, but looks like $10K + $200 per "resource
unit", whatever that maps out to be. Definitely not on the same level
as the typical solutions.

Mark

--
Mark D. Nagel, CCIE #3177 <mnagel [at] willingminds>
Principal Consultant, Willing Minds LLC (http://www.willingminds.com)
cell: 949-279-5817, desk: 714-630-4772, fax: 949-623-9854

*** Please send support requests to support [at] willingminds! ***

NANOG users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.