Re: NetFlow analyzer software
ManageEngine's product is the one that kills browsers because you can tell it to list the top X ASNs. ------Original Message------ From: Brian R. Watters To: nanog@nanog.org Cc: nanog@nanog.org ReplyTo: Brian R. Watters Subject: RE: NetFlow analyzer software Sent: Oct 19, 2009 10:45 AM We have used this product with great success and its reasonable in pricing and well supported. http://www.manageengine.com/products/netflow/index.html BRW -----Original Message----- From: mark jackson [mailto:markcciejackson@gmail.com] Sent: Monday, October 19, 2009 10:47 AM To: mike@m5computersecurity.com Cc: nanog@nanog.org Subject: Re: NetFlow analyzer software What's up gold Mrtpg Scrtinizer Nagios Riverbed Cascade Solarwinds Sent from my iPhone Please excuse spelling errors On Oct 19, 2009, at 10:43 AM, "Michael J McCafferty" <mike@m5computersecurity.com
wrote:
All, I am looking for decent netflow analyzer and reporting software with good support for AS data. ManagEngine's product crashes or locks up my browser when I try to list/sort the AS info because it's too large of a list and there is no way to tell it to show just the top x results. Plixer's Scrutenizer, while it seems like it's a pretty decent product, is no longer supporting Linux... We are a Linux shop (servers, desktops, laptops). What else is there that I might want to look at?
Thanks! Mike M5Hosting.com Sent from my Verizon Wireless BlackBerry
Sent from my Verizon Wireless BlackBerry
Manage Engine flow receiver with no user sessions viewing statistics runs at 100% CPU for 200+ Mbps unsampled traffic. It's suited to SMBs only. Rubens On Mon, Oct 19, 2009 at 4:36 PM, Michael J McCafferty <mike@m5computersecurity.com> wrote:
ManageEngine's product is the one that kills browsers because you can tell it to list the top X ASNs. ------Original Message------ From: Brian R. Watters To: nanog@nanog.org Cc: nanog@nanog.org ReplyTo: Brian R. Watters Subject: RE: NetFlow analyzer software Sent: Oct 19, 2009 10:45 AM
We have used this product with great success and its reasonable in pricing and well supported.
http://www.manageengine.com/products/netflow/index.html
BRW
-----Original Message----- From: mark jackson [mailto:markcciejackson@gmail.com] Sent: Monday, October 19, 2009 10:47 AM To: mike@m5computersecurity.com Cc: nanog@nanog.org Subject: Re: NetFlow analyzer software
What's up gold Mrtpg Scrtinizer Nagios Riverbed Cascade Solarwinds
Sent from my iPhone Please excuse spelling errors
On Oct 19, 2009, at 10:43 AM, "Michael J McCafferty" <mike@m5computersecurity.com > wrote:
All, I am looking for decent netflow analyzer and reporting software with good support for AS data. ManagEngine's product crashes or locks up my browser when I try to list/sort the AS info because it's too large of a list and there is no way to tell it to show just the top x results. Plixer's Scrutenizer, while it seems like it's a pretty decent product, is no longer supporting Linux... We are a Linux shop (servers, desktops, laptops). What else is there that I might want to look at?
Thanks! Mike M5Hosting.com Sent from my Verizon Wireless BlackBerry
Sent from my Verizon Wireless BlackBerry
Yes my experience was the same on with Manage Engine. Although, they do have an article buried in their archives that shows how to tweak the mysql and java memory settings on start of the app. We found that helped a bit. We were successfully using it for netflows from more than 100Mbps, so I would say it can handle a bit more than typical SMB traffic. I don't know if anyone mentioned it, but a good commercial product a former customer of mine used to use was Solarwinds Orion. Jeffrey -----Original Message----- From: Rubens Kuhl [mailto:rubensk@gmail.com] Sent: Monday, October 19, 2009 4:38 PM To: Nanog Subject: Re: NetFlow analyzer software Manage Engine flow receiver with no user sessions viewing statistics runs at 100% CPU for 200+ Mbps unsampled traffic. It's suited to SMBs only. Rubens On Mon, Oct 19, 2009 at 4:36 PM, Michael J McCafferty <mike@m5computersecurity.com> wrote:
ManageEngine's product is the one that kills browsers because you can tell it to list the top X ASNs. ------Original Message------ From: Brian R. Watters To: nanog@nanog.org Cc: nanog@nanog.org ReplyTo: Brian R. Watters Subject: RE: NetFlow analyzer software Sent: Oct 19, 2009 10:45 AM
We have used this product with great success and its reasonable in pricing and well supported.
http://www.manageengine.com/products/netflow/index.html
BRW
-----Original Message----- From: mark jackson [mailto:markcciejackson@gmail.com] Sent: Monday, October 19, 2009 10:47 AM To: mike@m5computersecurity.com Cc: nanog@nanog.org Subject: Re: NetFlow analyzer software
What's up gold Mrtpg Scrtinizer Nagios Riverbed Cascade Solarwinds
Sent from my iPhone Please excuse spelling errors
On Oct 19, 2009, at 10:43 AM, "Michael J McCafferty" <mike@m5computersecurity.com > wrote:
All, I am looking for decent netflow analyzer and reporting software with good support for AS data. ManagEngine's product crashes or locks up my browser when I try to list/sort the AS info because it's too large of a list and there is no way to tell it to show just the top x results. Plixer's Scrutenizer, while it seems like it's a pretty decent product, is no longer supporting Linux... We are a Linux shop (servers, desktops, laptops). What else is there that I might want to look at?
Thanks! Mike M5Hosting.com Sent from my Verizon Wireless BlackBerry
Sent from my Verizon Wireless BlackBerry
Jeffrey Negro wrote:
Yes my experience was the same on with Manage Engine. Although, they do have an article buried in their archives that shows how to tweak the mysql and java memory settings on start of the app. We found that helped a bit. We were successfully using it for netflows from more than 100Mbps, so I would say it can handle a bit more than typical SMB traffic.
I don't know if anyone mentioned it, but a good commercial product a former customer of mine used to use was Solarwinds Orion.
A bout of research a few years back turned up IBM Aurora (http://www.zurich.ibm.com/aurora/), now sold as Tivoli/Netcool (http://www-01.ibm.com/software/tivoli/products/netcool-performance-flow/) as a potential solution for high performance analysis, but IIRC, a fairly hefty price tag applied based on traffic volume. Looking at the second URL, it is not clear, but looks like $10K + $200 per "resource unit", whatever that maps out to be. Definitely not on the same level as the typical solutions. Mark -- Mark D. Nagel, CCIE #3177 <mnagel@willingminds.com> Principal Consultant, Willing Minds LLC (http://www.willingminds.com) cell: 949-279-5817, desk: 714-630-4772, fax: 949-623-9854 *** Please send support requests to support@willingminds.com! ***
participants (4)
-
Jeffrey Negro -
Mark D. Nagel -
Michael J McCafferty -
Rubens Kuhl