<div class="gmail_quote">On Thu, Feb 2, 2012 at 10:32 AM, Andy Davidson <span dir="ltr"><<a href="mailto:andy@nosignal.org" target="_blank">andy@nosignal.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
Hi, Burak<br>
<div><br>
On 1 Feb 2012, at 14:27, Burak Dikici wrote:<br>
<br>
> I am looking for the open source flow collector program which is able to use in the ISP size. Specially i am expecting the functions from the flow collector program which are ;<br>
><br>
> - traffic analysis, network visibility and baselining<br>
> - detect network anomalies<br>
> - forensics and incident response<br>
<br>
</div>I've used NFSEN to great effect for this purpose. <a href="http://nfsen.sourceforge.net/" target="_blank">http://nfsen.sourceforge.net/</a><br>
<br>
It's really very good for spotting and removing abusive traffic (i.e. identifying compromised hosts/customers in the process of an attack), and performing traffic analysis so that you can better handle your customers' needs. One thing you have not mentioned in your brief that NFSEN is good for, is identifying networks that you exchange significant traffic with so that you can ask them for peering.<br>
<br>
Using netflow to help with abuse mitigation and improving your network decision making would make a great topic for a future MENOG meeting.<br>
<br>
<br>
Best wishes,<br>
<span><font color="#888888">Andy Davidson<br>
</font></span><div><div></div></div></blockquote><div><br></div><div>Burak bey,</div><div><br></div><div>Let me suggest <a href="http://www.pmacct.net/" target="_blank">http://www.pmacct.net/</a> for a more complex solution. Please draw your attention to the most recent slideshows in the documentation section.</div>
<div><br></div><div>Selamlar</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>_______________________________________________<br>
Menog mailing list<br>
<a href="mailto:Menog@menog.net" target="_blank">Menog@menog.net</a><br>
<a href="http://lists.menog.net/mailman/listinfo/menog" target="_blank">http://lists.menog.net/mailman/listinfo/menog</a><br>
</div></div></blockquote></div><br>