Re: Looking for Netflow analysis package
Does anyone know of a netflow collector that will do the following. <snip>
-------------Original Message-------------
From: Laura Smith [mailto:leavingin13@yahoo.com] <UCE snipped out>
-------------"Meshier, Brent" wrote: ------------
Do not appreciate the cold call from Plixer. Please do not use the NANOG mailing list as your personal directory for sales leads. It's a sure fire way to get your company blacklisted among IT professionals.
-------- tcannon@beatsmusic.com wrote: ---------- From: Thomas Cannon <tcannon@beatsmusic.com> That wasn't in your signature's disclaimer. Perhaps now would be a good time to add it? ------------------------------------------------ You haven't been here long have you... He DOES NOT need a 260 word signature (see below!) to make sure he does not get UCE from posting to NANOG. For any other sales folks out there considering doing this, Brent's warning is a good one: "It's a sure fire way to get your company blacklisted among IT professionals." scott ps. WTF is this?!? **************************************************************************************************************************************************************************************** The material contained herein is for informational purposes only and is not intended as an offer or solicitation with respect to the purchase or sale of securities. The decision of whether to adopt any strategy or to engage in any transaction and the decision of whether any strategy or transaction fits into an appropriate portfolio structure remains the responsibility of the customer and/or its advisors. Past performance on the underlying securities is no guarantee of future results. This material is intended for use by institutional clients only and not for use by the general public. Portions of this material may incorporate information provided by third party market data sources. Although this information has been obtained from and based upon sources believed to be reliable, neither Amherst Holdings, LLC nor any of its affiliates guarantee the accuracy or completeness of the information contained herein, and cannot be held responsible for inaccuracies in such third party data or the data supplied to the third party by issuers or guarantors. This report constitutes Amherst’s views as of the date of the report and is subject to change without notice. This information does not purport to be a complete analysis of any security, company or industry, including but not limited to any claim as to the prepayment consistency and/or the future performance of any securities or structures. To the extent applicable, change in prepayment rates and/or payments may significantly affect yield, price, total return and average life. Our affiliate, Amherst Securities Group, L.P., may have a position in securities discussed in this material.
Is anyone using an open source solution to process netflow v9 captures? I'm waiting for SiLK v3 for some time now, which is currently only available for TLA's and Universities. Currently looking into nfdump. Tim On May 17, 2013, at 12:16 AM, Scott Weeks wrote:
Does anyone know of a netflow collector that will do the following. <snip>
-------------Original Message-------------
From: Laura Smith [mailto:leavingin13@yahoo.com] <UCE snipped out>
-------------"Meshier, Brent" wrote: ------------
Do not appreciate the cold call from Plixer. Please do not use the NANOG mailing list as your personal directory for sales leads. It's a sure fire way to get your company blacklisted among IT professionals.
-------- tcannon@beatsmusic.com wrote: ---------- From: Thomas Cannon <tcannon@beatsmusic.com>
That wasn't in your signature's disclaimer. Perhaps now would be a good time to add it? ------------------------------------------------
You haven't been here long have you...
He DOES NOT need a 260 word signature (see below!) to make sure he does not get UCE from posting to NANOG. For any other sales folks out there considering doing this, Brent's warning is a good one: "It's a sure fire way to get your company blacklisted among IT professionals."
scott
ps. WTF is this?!? **************************************************************************************************************************************************************************************** The material contained herein is for informational purposes only and is not intended as an offer or solicitation with respect to the purchase or sale of securities. The decision of whether to adopt any strategy or to engage in any transaction and the decision of whether any strategy or transaction fits into an appropriate portfolio structure remains the responsibility of the customer and/or its advisors. Past performance on the underlying securities is no guarantee of future results. This material is intended for use by institutional clients only and not for use by the general public. Portions of this material may incorporate information provided by third party market data sources. Although this information has been obtained from and based upon sources believed to be reliable, neither Amherst Holdings, LLC nor any of its affiliates guarantee the accuracy or completeness of the information contained herein, and cannot be held responsible for inaccuracies in such third party data or the data supplied to the third party by issuers or guarantors. This report constitutes Amherst’s views as of the date of the report and is subject to change without notice. This information does not purport to be a complete analysis of any security, company or industry, including but not limited to any claim as to the prepayment consistency and/or the future performance of any securities or structures. To the extent applicable, change in prepayment rates and/or payments may significantly affect yield, price, total return and average life. Our affiliate, Amherst Securities Group, L.P., may have a position in securities discussed in this material.
On Fri, May 17, 2013 at 12:11:57PM +0200, Tim Vollebregt wrote:
Is anyone using an open source solution to process netflow v9 captures? I'm waiting for SiLK v3 for some time now, which is currently only available for TLA's and Universities.
pmacct does this pretty nicely (along with a couple other things) -J
Check out argus http://www.qosient.com/argus/ Netflow v9 support was added within the last few months. Cheers, Harry On 05/17/2013 06:11 AM, Tim Vollebregt wrote:
Is anyone using an open source solution to process netflow v9 captures? I'm waiting for SiLK v3 for some time now, which is currently only available for TLA's and Universities.
Currently looking into nfdump.
Tim On May 17, 2013, at 12:16 AM, Scott Weeks wrote:
Does anyone know of a netflow collector that will do the following. <snip>
-------------Original Message-------------
From: Laura Smith [mailto:leavingin13@yahoo.com] <UCE snipped out>
-------------"Meshier, Brent" wrote: ------------
Do not appreciate the cold call from Plixer. Please do not use the NANOG mailing list as your personal directory for sales leads. It's a sure fire way to get your company blacklisted among IT professionals.
-------- tcannon@beatsmusic.com wrote: ---------- From: Thomas Cannon <tcannon@beatsmusic.com>
That wasn't in your signature's disclaimer. Perhaps now would be a good time to add it? ------------------------------------------------
You haven't been here long have you...
He DOES NOT need a 260 word signature (see below!) to make sure he does not get UCE from posting to NANOG. For any other sales folks out there considering doing this, Brent's warning is a good one: "It's a sure fire way to get your company blacklisted among IT professionals."
scott
ps. WTF is this?!? **************************************************************************************************************************************************************************************** The material contained herein is for informational purposes only and is not intended as an offer or solicitation with respect to the purchase or sale of securities. The decision of whether to adopt any strategy or to engage in any transaction and the decision of whether any strategy or transaction fits into an appropriate portfolio structure remains the responsibility of the customer and/or its advisors. Past performance on the underlying securities is no guarantee of future results. This material is intended for use by institutional clients only and not for use by the general public. Portions of this material may incorporate information provided by third party market data sources. Although this information has been obtained from and based upon sources believed to be reliable, neither Amherst Holding
s, LLC nor any of its affiliates guarantee the accuracy or completeness of the information contained herein, and cannot be held responsible for inaccuracies in such third party data or the data supplied to the third party by issuers or guarantors. This report constitutes Amherst’s views as of the date of the report and is subject to change without notice. This information does not purport to be a complete analysis of any security, company or industry, including but not limited to any claim as to the prepayment consistency and/or the future performance of any securities or structures. To the extent applicable, change in prepayment rates and/or payments may significantly affect yield, price, total return and average life. Our affiliate, Amherst Securities Group, L.P., may have a position in securities discussed in this material.
On 2013-05-17 8:11 pm, Tim Vollebregt wrote:
Is anyone using an open source solution to process netflow v9 captures? I'm waiting for SiLK v3 for some time now, which is currently only available for TLA's and Universities.
Currently looking into nfdump.
To drag this back on topic, yes I'm currently using nfcap/nfdump to capture and parse Netflow v9. It's not as tidy as I'd like but it does the job. If you want something you can just point and shoot, nfsen ties those two tools together into one config file.
Tim
Op 20-5-2013 0:40, Cameron Daniel schreef:
On 2013-05-17 8:11 pm, Tim Vollebregt wrote:
Is anyone using an open source solution to process netflow v9 captures? I'm waiting for SiLK v3 for some time now, which is currently only available for TLA's and Universities.
Currently looking into nfdump.
To drag this back on topic, yes I'm currently using nfcap/nfdump to capture and parse Netflow v9. It's not as tidy as I'd like but it does the job.
If you want something you can just point and shoot, nfsen ties those two tools together into one config file.
Tim
Not only for netflow analysis, but also a DDOS detection tool: I am testing Andrisoft Wanguard this month. Very nice webinterface and has even possibility to do BGP blackholing. RInse
On Thu, 16 May 2013 15:16:22 -0700, "Scott Weeks" said:
You haven't been here long have you...
He DOES NOT need a 260 word signature (see below!) to make sure he does not get UCE from posting to NANOG.
Actually, I think Thomas Cannon was making the opposite point - that if he's going to spam us all with a 260 word disclaimer, it could have been expanded to 263 words and add 'No cold calls'. Or just have that and lose the other 260 words that make absolutely no sense on a NANOG posting.
On May 17, 2013, at 8:24 AM, Valdis.Kletnieks@vt.edu wrote:
On Thu, 16 May 2013 15:16:22 -0700, "Scott Weeks" said:
You haven't been here long have you...
He DOES NOT need a 260 word signature (see below!) to make sure he does not get UCE from posting to NANOG.
Actually, I think Thomas Cannon was making the opposite point - that if he's going to spam us all with a 260 word disclaimer, it could have been expanded to 263 words and add 'No cold calls'. Or just have that and lose the other 260 words that make absolutely no sense on a NANOG posting.
Do you believe that Brent wrote the disclaimer attached to his message? Despite y/our opinions of such disclaimers, legal counsel in some companies still mandate their automatic attachment on all outbound messages. The only means of avoiding them is to subscribe to mailing lists from a personal e-mail account. Unfortunately these companies usually also have policies prohibiting your accessing personal e-mail accounts from company owned resources which can minimize the usefulness of some lists. In other words, just because we might work for "enlightened" companies doesn't mean all our colleagues can or do.
Well put. On May 17, 2013 1:54 PM, "John Starta" <john@starta.org> wrote:
On May 17, 2013, at 8:24 AM, Valdis.Kletnieks@vt.edu wrote:
On Thu, 16 May 2013 15:16:22 -0700, "Scott Weeks" said:
You haven't been here long have you...
He DOES NOT need a 260 word signature (see below!) to make sure he does not get UCE from posting to NANOG.
Actually, I think Thomas Cannon was making the opposite point - that if he's going to spam us all with a 260 word disclaimer, it could have been expanded to 263 words and add 'No cold calls'. Or just have that and lose the other 260 words that make absolutely no sense on a NANOG posting.
Do you believe that Brent wrote the disclaimer attached to his message? Despite y/our opinions of such disclaimers, legal counsel in some companies still mandate their automatic attachment on all outbound messages. The only means of avoiding them is to subscribe to mailing lists from a personal e-mail account. Unfortunately these companies usually also have policies prohibiting your accessing personal e-mail accounts from company owned resources which can minimize the usefulness of some lists. In other words, just because we might work for "enlightened" companies doesn't mean all our colleagues can or do.
On Fri, 17 May 2013 10:02:53 -0700, John Starta said:
Do you believe that Brent wrote the disclaimer attached to his message? Despite y/our opinions of such disclaimers, legal counsel in some companies still mandate their automatic attachment on all outbound messages. The only means of avoiding them is to subscribe to mailing lists from a personal e-mail account.
There's another way. Educate the technology-challenged people who mandated the disclaimer.
participants (9)
-
Cameron Daniel -
Harry Hoffman -
John Starta -
JP -
Phil Fagan -
Rinse Kloek -
Scott Weeks -
Tim Vollebregt -
Valdis.Kletnieks＠vt.edu