Open source alternatives to UNINETT Stager for visual netflow peering analysis

[jloiacon at csc.com (Joe Loiacono)]

You could use FlowViewer with the flow-tools underlying collector option 
if you're collecting v5 netflow. This will permit you to keep long-term 
graphs (ala MRTG - Last 24 hours, Last 7 days, etc.) for each AS peer with 
5-minute granularity You can also graph specified time intervals at much 
smaller time-bucket sizes.

FlowViewer has an IPFIX (e.g., v9, FNF, etc.) underlying collector also; 
SiLK. However, last I checked, SiLK is not collecting AS information.

https://sourceforge.net/projects/flowviewer

Regards, 

Joe




From:   "Peter Kranz" <pkranz at unwiredltd.com>
To:     <nanog at nanog.org>
Date:   04/10/2015 11:26 AM
Subject:        Open source alternatives to UNINETT Stager for visual 
netflow peering analysis
Sent by:        "NANOG" <nanog-bounces at nanog.org>



We've really enjoyed the open source Stager platform for netflow analysis,
however the code has not seen updates in recent years. Looking for
alternative open source netflow analysis platforms with a web interface.
There are quite a few netflow tools around these days, and we are looking
for something that performs the steps needed to showing us traffic volumes
to particular AS#'s and their downstream customers for peering analysis
decisions. I can get coarse answers from nfdump, but would like something
more elegant for the NOC to use.

 

Peter Kranz
www.UnwiredLtd.com <http://www.unwiredltd.com/> 
Desk: 510-868-1614 x100
Mobile: 510-207-0000
pkranz at unwiredltd.com <mailto:pkranz at unwiredltd.com>