Have you used flow-tools?
http://www.splintered.net/sw/
 
You can configure it to filter on pretty much any parameter that's contained
in the flow-export packets.  Then you send it to the report tool that's included
in the flow-tools suite, after which you can put it through a perl script or
a graphing tool or whatever in near real-time.
 
-----Original Message-----
From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Drew Weaver
Sent: Friday, March 26, 2004 3:39 PM
To: nanog@merit.edu
Subject: Sorry if this discussion has been had recently but

            I know there is a way to do this, but what is the absolute Defacto best method of tracking flows from Cisco/Juniper routers? I know there is some freeware available such as cflowd but we really need something that will alert us to trouble before it becomes a problem. We don't mind buying an appliance to do this, and it doesn't have to be freeware software, we just want something that will work.

 

Thanks,

-Drew