I know this is not in the spirit of this list, however, I am sure those who have addressed this issue are participants in this list. If you have web resources, or FAQs please point me in this direction. I have seen a fair amount of threads on related to this topic on this list, but none of them address the equipment that is being used for the collection and analyzing of netflow data. We are looking to collect about Gig of netflow data/hour. We are looking into how we can purge unneeded details, and keep just stats. That said we will atleast want to keeps a weeks worth of data, and backup old data to tape. We most likely will us Solaris as the platform of choice, but are open to others recommendations. What memory and disk storage setups are people using to collect and analyze data set of this size? Any recommendations are welcome. Please respond to me directly. Thanks, -Roy Hockett
Roy Hockett wrote:
I know this is not in the spirit of this list, however, I am sure those who have addressed this issue are participants in this list. If you have web resources, or FAQs please point me in this direction.
The links below should be public. http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/nfc/index.htm http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/nfa/index.htm (Thanks Brett)
I have seen a fair amount of threads on related to this topic on this list, but none of them address the equipment that is being used for the collection and analyzing of netflow data. We are looking to collect about Gig of netflow data/hour. We are looking into how we can purge unneeded details, and keep just stats. That said we will atleast want to keeps a weeks worth of data, and backup old data to tape. We most likely will us Solaris as the platform of choice, but are open to others recommendations. What memory and disk storage setups are people using to collect and analyze data set of this size? Any recommendations are welcome.
Platform requirements are depended on various factors, including traffic load, data retention policy, etc... I'll be more than happy to with you offline on your specific requirements. - Anders
Please respond to me directly.
Thanks, -Roy Hockett
participants (2)
-
Anders K. Fung
-
Roy Hockett