I did see an article about Team Cymru selling netflow data from ISPs to governments though.Team Cymru sold the same thing to the FBI Cyber Crimes division that any of us could purchase if we wanted to pay for it.On Tue, May 16, 2023 at 8:52 AM Rishi Panthee <rishipanthee@ryamer.com> wrote:I’ve got Akvorado and netflow to identify where traffic comes in/goes to so we can improve our peering and make less traffic go via transit. I did see an article about Team Cymru selling netflow data from ISPs to governments though. https://www.vice.com/en/article/dy3z9a/fbi-bought-netflow-data-team-cymru-contract
On May 15, 2023, at 5:59 PM, Michael Thomas <mike@mtcc.com> wrote:
And maybe try to monetize it? I'm pretty sure that they can be compelled to do that, but do they do it for their own reasons too? Or is this way too much overhead to be doing en mass? (I vaguely recall that netflow, for example, can make routers unhappy if there is too much "flow").
Obviously this is likely to depend on local laws but since this is NANOG we can limit it to here.
Mike