22 Aug
2015
22 Aug
'15
2:53 p.m.
On 8/21/15, Mike Perry mikeperry@torproject.org wrote: ...
For those into researching other flow capabilities... There are also some probes in OS kernels and some other opensource taps, they're not as well known or utilized as nProbe. Other large hardware vendors include Brocade, Avaya, Huawei, and Alcatel-Lucent.
Out of all of these, I was only able find info on Alcatel-Lucent. It uses cflowd, which appears to be a common subcomponent. It's timeout ranges are the same as Cisco IOS.
for posterity, it would also be useful to scrutinize behavior of: - Arbor Peakflow SP - Narus Insight Manager - Lancope StealthWatch Xe
with respect to soft or hard fixed NetFlow limits within analysis or as pushed to tapped switches.
best regards,