I’ve been looking for a good NetFlow collector I’ve tried prtg but it seems a bit basic what’s everyone else using and is there’s any good open source free ones
If you don’t care about details but just traffic, observium!
I’m looking for things like top IP usage
has Observium a collector in it?
i am looking for a free collector which will get fed by mikrotik routers and should forward to “ntopng”
will have a look into ipfixcol2
While not a complete solution (rather a collection of tools to build your solution around it), you may want to check pmacct
http://www.pmacct.net/
I’ve been using it for well over a decade now, and once I integrated it into my stack, I’ve never had to touch it again. It just works.
What plugins are you using ? Creating files and importing further ? Straight into SQL-DB ? AMQP ? Kafka ?
What tooling do you use to visualize further ? Something like a Grafana dashboard ?
Thanks for any feedback.
I have used GitHub - synfinatic/netflow2ng: NetFlow v9 collector for ntopng as a free alternative to nProbe to feed to ntopng with great success.
I needed to account the traffic for VMs without having access on them so I integrated pmacct in an old control panel to account only for what traffic each IP address has done during each month. Of course it can do many more than just that.
So I store the data into a MySQL database, which I then graph using some javascript graph library (I don’t even recall the name - it’s been well over a decade now).
If I were to do this today, I would obviously use more modern storage and presentation technologies/software/libraries, but I would also still use pmacct, which I found very versatile (especially at that time, where nothing else similar existed out there - only full fledged commercial solutions).
that is great news to hear. need to setup some test configs/labs to see how scalable that will be. need to test it further on 10,25,40 and 100 Gbit network at work
thanks a lot in advance
When talking about netflow and easy Traffic-Analysis, https://github.com/akvorado/akvorado crosses my mind.
Hi, please, could you help me set it up? I have tried for several days to make it work but it has been impossible.
Any recommendation for a super simple, near zero learning curve solution for traffic monitoring?