Skip to content

Instantly share code, notes, and snippets.

@narutaro

narutaro/Best open source NetFlow collector.md

Last active October 23, 2024 14:43
Show Gist options
  • Save narutaro/e0c678bf22b25bc1ef82 to your computer and use it in GitHub Desktop.
Save narutaro/e0c678bf22b25bc1ef82 to your computer and use it in GitHub Desktop.
Download ZIP
Best open source NetFlow collector
Raw
Best open source NetFlow collector.md

#Open source NetFlow collector ##Over ten years players ###nfsen family - nfpcapd nfsen has very stable and well-accumulated feature set. It provides full-stack of NetFlow feature. NetFlow collector daemon nfpcapd, flow dump file operation tool nfdump and Web front-end nfsen. Community is still avtive.

###ntop-ng family - nprobe

###pmacct family- pmacctd Momory table is something that I want to try.

##New commers from log collection domain

  1. fluentd + netflow plug-in
  • peformance: Saturate around 600fps. Basically one fluentd process can use one CPU core and around 600fps, it keeps 99% CPU core usage.
  1. logstash + netflow plug-in
  2. graylog
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment