[rtg] Fwd: Results with RTG

[Brent Imhoff]

Harry Marcson wrote:
> Is netflow actually more accurate? Our cisco gear does support 
> netflow, but we have never tested it, I could not find an opensource 
> solution to try, but will do some more searching.
I wouldn't say more accurate but it can give you some interesting 
insights depending on what you're looking for.  If you wanted to know 
how much of your traffic was destined for a particular AS or if you 
wanted to see how much of your data matched particular port numbers (to 
attempt to predict application usage), those would be great applications 
for netflow.

Since most netflow implementations are sampled, meaning you're only 
collecting 1 of every 100-1000 packets, I wouldn't recommend it for 
billing.  Of course, YMMV depending on the size of the network..  The 
smaller it is, the easier it is for the router to generate flow stats.

cflowd is a decent linux opensource collector.  You'd be on your own to 
generate useful information out of it.  http://www.paessler.com has a 
windows based product.  No idea if it's good or not.  Linux based 
product: http://neye.unsupported.info/ but again, no idea if it works 
well or not.  One that I have implemented at previous employers is from 
Arbor Networks (I'm not affliated with them).  That product is really 
great, but you'll pay dearly for it.

-brent
> ------------------------------------------------------------------------
>
> _______________________________________________
> RTG mailing list
> RTG at lists.grdata.com
> http://lists.grdata.com/mailman/listinfo/rtg
>