Main Nav

Hello All, Anyone know of a good commercial or free Netflow collector/analyzer? I'm looking for something that can graph the different types of applications that are being used on the network and that could possible log the connections for forensics. I'm not a big fan of NTOP so something besides that. Thanks, Vlad ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

Comments

Message from jeremy@evilrouters.net

Hi Vlad, If you're interested in the DIY approach, I'd suggest looking into nfdump and it's web-based front-end companion, nfsen. On the commercial side of things, I've used and can recommend the offerings from both SolarWinds and ManageEngine. -- Jeremy L. Gaddis http://evilrouters.net/
Open source = nfsen

Commercial = scrutinizer

We just moved to scrutinizer.  Pretty good 
-
Pete Hoffswell - Network Manager
pete.hoffswell@davenport.edu
http://www.davenport.edu
616-732-1101


Scrutinizer does looks good but might be a little pricey. I'm playing with nfdump right now and I think it'll do the basics for now. Thanks to you and Jeremy for the feedback.

On 5/8/2012 5:34 PM, Pete Hoffswell wrote:
Open source = nfsen

Commercial = scrutinizer

We just moved to scrutinizer.  Pretty good 
-
Pete Hoffswell - Network Manager
pete.hoffswell@davenport.edu
http://www.davenport.edu
616-732-1101


Message from peter.charbonneau@williams.edu

Periodically, Scrutinizer has a "free application day" and Scrutinizer is free to education.  You do have to purchase maintenance (I THINK that is around $500.00/yr); we purchased multiple years of maintenance at one time to drop the per annum cost even further.

I am using both Scrutinizer and nfdump/nfsen.  Scrutinizer, as a paid app, generates nice pretty pictures - senior staff loves pretty pictures.  I have/keep all of the netflow data captured using nfcapd, so I have a yearly repository of raw, saved netflow data that I can refer to when I need it.

Just another data point for you to mull over.

p

On May 10, 2012, at 12:10 PM, Vlade Ristevski wrote:

Scrutinizer does looks good but might be a little pricey. I'm playing with nfdump right now and I think it'll do the basics for now. Thanks to you and Jeremy for the feedback.

On 5/8/2012 5:34 PM, Pete Hoffswell wrote:
Open source = nfsen

Commercial = scrutinizer

We just moved to scrutinizer.  Pretty good 
-
Pete Hoffswell - Network Manager
pete.hoffswell@davenport.edu
http://www.davenport.edu
616-732-1101


Good to know. We would definitely like to have the pretty graphs. We are considering getting a Netequalizer because it's cheap but the graphing and reporting is terrible compared to Procera, Exinda and Packetshaper. I was hoping to possible fill that gap with some netflow reporting.

On 5/10/2012 12:37 PM, Peter Charbonneau wrote:
Periodically, Scrutinizer has a "free application day" and Scrutinizer is free to education.  You do have to purchase maintenance (I THINK that is around $500.00/yr); we purchased multiple years of maintenance at one time to drop the per annum cost even further.

I am using both Scrutinizer and nfdump/nfsen.  Scrutinizer, as a paid app, generates nice pretty pictures - senior staff loves pretty pictures.  I have/keep all of the netflow data captured using nfcapd, so I have a yearly repository of raw, saved netflow data that I can refer to when I need it.

Just another data point for you to mull over.

p

On May 10, 2012, at 12:10 PM, Vlade Ristevski wrote:

Scrutinizer does looks good but might be a little pricey. I'm playing with nfdump right now and I think it'll do the basics for now. Thanks to you and Jeremy for the feedback.

On 5/8/2012 5:34 PM, Pete Hoffswell wrote:
Open source = nfsen

Commercial = scrutinizer

We just moved to scrutinizer.  Pretty good 
-
Pete Hoffswell - Network Manager
pete.hoffswell@davenport.edu
http://www.davenport.edu
616-732-1101