Have you used flow-tools? http://www.splintered.net/sw/ You can configure it to filter on pretty much any parameter that's contained in the flow-export packets. Then you send it to the report tool that's included in the flow-tools suite, after which you can put it through a perl script or a graphing tool or whatever in near real-time. -----Original Message----- From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Drew Weaver Sent: Friday, March 26, 2004 3:39 PM To: nanog@merit.edu Subject: Sorry if this discussion has been had recently but I know there is a way to do this, but what is the absolute Defacto best method of tracking flows from Cisco/Juniper routers? I know there is some freeware available such as cflowd but we really need something that will alert us to trouble before it becomes a problem. We don't mind buying an appliance to do this, and it doesn't have to be freeware software, we just want something that will work. Thanks, -Drew