Open source alternatives to UNINETT Stager for visual netflow peering analysis
We've really enjoyed the open source Stager platform for netflow analysis, however the code has not seen updates in recent years. Looking for alternative open source netflow analysis platforms with a web interface. There are quite a few netflow tools around these days, and we are looking for something that performs the steps needed to showing us traffic volumes to particular AS#'s and their downstream customers for peering analysis decisions. I can get coarse answers from nfdump, but would like something more elegant for the NOC to use. Peter Kranz www.UnwiredLtd.com <http://www.unwiredltd.com/> Desk: 510-868-1614 x100 Mobile: 510-207-0000 pkranz@unwiredltd.com <mailto:pkranz@unwiredltd.com>
https://github.com/manuelkasper/AS-Stats does that precise job (and nothing else) On 4/11/2015 午前 12:24, Peter Kranz wrote:
We've really enjoyed the open source Stager platform for netflow analysis, however the code has not seen updates in recent years. Looking for alternative open source netflow analysis platforms with a web interface. There are quite a few netflow tools around these days, and we are looking for something that performs the steps needed to showing us traffic volumes to particular AS#'s and their downstream customers for peering analysis decisions. I can get coarse answers from nfdump, but would like something more elegant for the NOC to use.
Peter Kranz www.UnwiredLtd.com <http://www.unwiredltd.com/> Desk: 510-868-1614 x100 Mobile: 510-207-0000 pkranz@unwiredltd.com <mailto:pkranz@unwiredltd.com>
There's also nfsen to go on top of nfdump ... which can let you create views of the data showing per-as traffic stats. On Fri, Apr 10, 2015 at 11:29 AM, Paul S. <contact@winterei.se> wrote:
https://github.com/manuelkasper/AS-Stats does that precise job (and nothing else)
On 4/11/2015 午前 12:24, Peter Kranz wrote:
We've really enjoyed the open source Stager platform for netflow analysis, however the code has not seen updates in recent years. Looking for alternative open source netflow analysis platforms with a web interface. There are quite a few netflow tools around these days, and we are looking for something that performs the steps needed to showing us traffic volumes to particular AS#'s and their downstream customers for peering analysis decisions. I can get coarse answers from nfdump, but would like something more elegant for the NOC to use.
Peter Kranz www.UnwiredLtd.com <http://www.unwiredltd.com/> Desk: 510-868-1614 x100 Mobile: 510-207-0000 pkranz@unwiredltd.com <mailto:pkranz@unwiredltd.com>
Nfsen is not a very "elegant" tool. It's very powerful, but it does require a fair amount of fiddling in order to get what you want out of it. On 4/10/2015 12:44 PM, Christopher Morrow wrote:
There's also nfsen to go on top of nfdump ... which can let you create views of the data showing per-as traffic stats.
On Fri, Apr 10, 2015 at 11:29 AM, Paul S. <contact@winterei.se> wrote:
https://github.com/manuelkasper/AS-Stats does that precise job (and nothing else)
On 4/11/2015 午前 12:24, Peter Kranz wrote:
We've really enjoyed the open source Stager platform for netflow analysis, however the code has not seen updates in recent years. Looking for alternative open source netflow analysis platforms with a web interface. There are quite a few netflow tools around these days, and we are looking for something that performs the steps needed to showing us traffic volumes to particular AS#'s and their downstream customers for peering analysis decisions. I can get coarse answers from nfdump, but would like something more elegant for the NOC to use.
Peter Kranz www.UnwiredLtd.com <http://www.unwiredltd.com/> Desk: 510-868-1614 x100 Mobile: 510-207-0000 pkranz@unwiredltd.com <mailto:pkranz@unwiredltd.com>
-- Laurent Dumont coldnorthadmin.com
I got the impression that Peter was looking for it to also do downstream ASes. I don't get that impression from the AS-Stats page. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com ----- Original Message ----- From: "Paul S." <contact@winterei.se> To: nanog@nanog.org Sent: Friday, April 10, 2015 10:29:02 AM Subject: Re: Open source alternatives to UNINETT Stager for visual netflow peering analysis https://github.com/manuelkasper/AS-Stats does that precise job (and nothing else) On 4/11/2015 午前 12:24, Peter Kranz wrote:
We've really enjoyed the open source Stager platform for netflow analysis, however the code has not seen updates in recent years. Looking for alternative open source netflow analysis platforms with a web interface. There are quite a few netflow tools around these days, and we are looking for something that performs the steps needed to showing us traffic volumes to particular AS#'s and their downstream customers for peering analysis decisions. I can get coarse answers from nfdump, but would like something more elegant for the NOC to use.
Peter Kranz www.UnwiredLtd.com <http://www.unwiredltd.com/> Desk: 510-868-1614 x100 Mobile: 510-207-0000 pkranz@unwiredltd.com <mailto:pkranz@unwiredltd.com>
You could use FlowViewer with the flow-tools underlying collector option if you're collecting v5 netflow. This will permit you to keep long-term graphs (ala MRTG - Last 24 hours, Last 7 days, etc.) for each AS peer with 5-minute granularity You can also graph specified time intervals at much smaller time-bucket sizes. FlowViewer has an IPFIX (e.g., v9, FNF, etc.) underlying collector also; SiLK. However, last I checked, SiLK is not collecting AS information. https://sourceforge.net/projects/flowviewer Regards, Joe From: "Peter Kranz" <pkranz@unwiredltd.com> To: <nanog@nanog.org> Date: 04/10/2015 11:26 AM Subject: Open source alternatives to UNINETT Stager for visual netflow peering analysis Sent by: "NANOG" <nanog-bounces@nanog.org> We've really enjoyed the open source Stager platform for netflow analysis, however the code has not seen updates in recent years. Looking for alternative open source netflow analysis platforms with a web interface. There are quite a few netflow tools around these days, and we are looking for something that performs the steps needed to showing us traffic volumes to particular AS#'s and their downstream customers for peering analysis decisions. I can get coarse answers from nfdump, but would like something more elegant for the NOC to use. Peter Kranz www.UnwiredLtd.com <http://www.unwiredltd.com/> Desk: 510-868-1614 x100 Mobile: 510-207-0000 pkranz@unwiredltd.com <mailto:pkranz@unwiredltd.com>
participants (6)
-
Christopher Morrow -
Joe Loiacono -
Laurent Dumont -
Mike Hammett -
Paul S. -
Peter Kranz