From Hasan.Ceylan at dowjones.com Fri Apr 16 11:43:12 2010 From: Hasan.Ceylan at dowjones.com (Ceylan, Hasan) Date: Fri Apr 16 11:43:18 2010 Subject: [Flow-tools] Re: flow tools Message-ID: <7E83B330B8C69546ACC670C1AE3C06CA721B36DEB7@SBKMXSMB06.win.dowjones.net> I need to know what is the capacity of net flow can this tool recevie? One million net flows per minute is feasible? Thanks, hasan -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.splintered.net/pipermail/flow-tools/attachments/20100416/816f479c/attachment.htm From sthaug at nethelp.no Fri Apr 16 14:25:30 2010 From: sthaug at nethelp.no (sthaug@nethelp.no) Date: Fri Apr 16 14:25:34 2010 Subject: [Flow-tools] Re: flow tools In-Reply-To: <7E83B330B8C69546ACC670C1AE3C06CA721B36DEB7@SBKMXSMB06.win.dowjones.net> References: <7E83B330B8C69546ACC670C1AE3C06CA721B36DEB7@SBKMXSMB06.win.dowjones.net> Message-ID: <20100416.202530.41694259.sthaug@nethelp.no> > I need to know what is the capacity of net flow can this tool recevie? One million net flows per minute is feasible? It depends a lot on your hardware. 1 million flows per minute is 16667 flows per second. Each packet typically holds 29 flows, so this is 574 pps - not a very high packet rate at all. But the data needs to be written to disk, of course. Steinar Haug, Nethelp consulting, sthaug@nethelp.no From apowers at lancope.com Thu Apr 22 12:49:36 2010 From: apowers at lancope.com (Adam Powers) Date: Thu Apr 22 12:49:42 2010 Subject: [Flow-tools] NetFlow v9 support in flow-tools? Message-ID: A colleague of mine mentioned the other day that he heard someone had updated flow-tools to support NetFlow v9. Truth? I can?t find anything about such support. -- Adam Powers NetFlow Ninja & CTO Lancope, Inc. c. 678.725.1028 e. apowers@lancope.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.splintered.net/pipermail/flow-tools/attachments/20100422/afc6611d/attachment.htm From craig.weinhold at cdw.com Thu Apr 22 13:03:46 2010 From: craig.weinhold at cdw.com (Craig Weinhold) Date: Thu Apr 22 13:03:50 2010 Subject: [Flow-tools] NetFlow v9 support in flow-tools? In-Reply-To: References: Message-ID: There's an active flow-tools code fork, but it also lacks netflow v9 support: http://code.google.com/p/flow-tools/updates/list Adding v9 to flow-tools is not that easy; the fixed-length file structure currently used doesn't lend itself to the arbitarry field/protocol capabilities of netflow v9. It's a substantial effort. See this post for a workaround (for IPv4 only): http://mailman.splintered.net/pipermail/flow-tools/2009-March/003765.html -Craig On Thu, 22 Apr 2010, Adam Powers wrote: > A colleague of mine mentioned the other day that he heard someone had updated flow-tools to support NetFlow v9. Truth? I can?t find anything about such support. > > -- > > Adam Powers > NetFlow Ninja & CTO > Lancope, Inc. > c. 678.725.1028 > e. apowers@lancope.com > From Hasan.Ceylan at dowjones.com Fri Apr 23 08:46:00 2010 From: Hasan.Ceylan at dowjones.com (Ceylan, Hasan) Date: Fri Apr 23 08:46:02 2010 Subject: [Flow-tools] Re: flow-tools and cacti In-Reply-To: <89aur7$1hm0obc@sb117inmr02.dowjones.com> Message-ID: <7E83B330B8C69546ACC670C1AE3C06CA721B36DF01@SBKMXSMB06.win.dowjones.net> Has anybody implemented flow-tools with cacti? -----Original Message----- From: flow-tools-bounces@list.splintered.net [mailto:flow-tools-bounces@list.splintered.net] On Behalf Of flow-tools-request@list.splintered.net Sent: Thursday, April 22, 2010 8:49 PM To: flow-tools@list.splintered.net Subject: Flow-tools Digest, Vol 77, Issue 2 Send Flow-tools mailing list submissions to flow-tools@list.splintered.net To subscribe or unsubscribe via the World Wide Web, visit http://mailman.splintered.net/mailman/listinfo/flow-tools or, via email, send a message with subject or body 'help' to flow-tools-request@list.splintered.net You can reach the person managing the list at flow-tools-owner@list.splintered.net When replying, please edit your Subject line so it is more specific than "Re: Contents of Flow-tools digest..." Today's Topics: 1. Re: Re: flow tools (sthaug@nethelp.no) ---------------------------------------------------------------------- Message: 1 Date: Fri, 16 Apr 2010 20:25:30 +0200 (CEST) From: sthaug@nethelp.no Subject: Re: [Flow-tools] Re: flow tools To: Hasan.Ceylan@dowjones.com Cc: flow-tools@list.splintered.net Message-ID: <20100416.202530.41694259.sthaug@nethelp.no> Content-Type: Text/Plain; charset=us-ascii > I need to know what is the capacity of net flow can this tool recevie? One million net flows per minute is feasible? It depends a lot on your hardware. 1 million flows per minute is 16667 flows per second. Each packet typically holds 29 flows, so this is 574 pps - not a very high packet rate at all. But the data needs to be written to disk, of course. Steinar Haug, Nethelp consulting, sthaug@nethelp.no ------------------------------ _______________________________________________ Flow-tools mailing list Flow-tools@list.splintered.net http://mailman.splintered.net/mailman/listinfo/flow-tools End of Flow-tools Digest, Vol 77, Issue 2 *****************************************