Tony, Take a look at pmacct, it will be able to handle your needs with a number of modifications. The section I linked below should give you a good starting point. Change the traffic dump to a MySQL database, add some indexes, craft some SQL queries, then you're off to the races. As for billing notifications, a cron script would need to calculate the usages, and alert based on your set thresholds. http://wiki.pmacct.net/OfficialExamples - XVII. Using pmacct as traffic/event logger For added bonus points, combine it with a BGP feed, and know where your traffic is going outbound, that way intelligent routing changes can be made much quicker. -- Ryan Hamel Network Administrator ryan.hamel@quadranet.com | +1 (888) 578-2372 QuadraNet Enterprises, LLC. | Dedicated Servers, Colocation, Cloud From: NANOG <nanog-bounces@nanog.org> On Behalf Of Tony C Sent: Friday, April 12, 2019 8:22 PM To: nanog@nanog.org Subject: Sflow billing or usage calculation software Hi All I am looking for Sflow analytical software that can tell me automatically over say a period of 24 hours (or any time period I select) the average mbit of data consumed for any IP address within our entire AS. (Without configuring a rule or billing group for each IP address or customer within our network) The purpose is to help quickly work out IP addressees which are using more bandwidth (in or out) than what we consider to be acceptable usage. For example, I would like to review a report or be automatically alerted to any IP address using more than an average of 50mbit within the past 24 hour plus have the capability to review data say over a month. Any names of software of suggestions would be great which I can investigate, happy to look at both commercial software and open source or if you have a Sflow billing solution for data consumption which is simple and easy to use please let me know Thanks Tony