From owner-freebsd-net@FreeBSD.ORG Thu Sep 9 19:58:57 2004 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CA41916A4CE for ; Thu, 9 Sep 2004 19:58:57 +0000 (GMT) Received: from c00l3r.networx.ch (c00l3r.networx.ch [62.48.2.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id C903D43D54 for ; Thu, 9 Sep 2004 19:58:56 +0000 (GMT) (envelope-from andre@freebsd.org) Received: (qmail 56852 invoked from network); 9 Sep 2004 19:55:13 -0000 Received: from unknown (HELO freebsd.org) ([62.48.0.53]) (envelope-sender ) by c00l3r.networx.ch (qmail-ldap-1.03) with SMTP for ; 9 Sep 2004 19:55:13 -0000 Message-ID: <4140B603.8E979D72@freebsd.org> Date: Thu, 09 Sep 2004 21:58:59 +0200 From: Andre Oppermann X-Mailer: Mozilla 4.8 [en] (Windows NT 5.0; U) X-Accept-Language: en MIME-Version: 1.0 To: Gleb Smirnoff References: <20040905121111.GA78276@cell.sick.ru> <4140834C.3000306@freebsd.org> <20040909171018.GA11540@cell.sick.ru> <414093DE.A6DC6E67@freebsd.org> <41409CB5.836DE816@freebsd.org> <20040909193507.GA12168@cell.sick.ru> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit cc: "Bjoern A. Zeeb" cc: net@freebsd.org Subject: Re: [TEST/REVIEW] Netflow implementation X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Sep 2004 19:58:57 -0000 Gleb Smirnoff wrote: > > On Thu, Sep 09, 2004 at 08:11:01PM +0200, Andre Oppermann wrote: > A> What is the point of Netflow accounting? (And I do run an ISP.) > A> Is it to get overall AS to/from AS traffic statistics? Then Netflow > A> is not very good for that. Do you really need information on every > A> flow? Are you going to report to the customer he had 4575 TCP flows > A> at $0.03 each at the end of the month? > > it is already offtopic, but... It is not really off-topic because you seem to use that as justification to put AS path's into the kernel. > Here in Russia (and other C.I.S. countries) there are different classes > of traffic, so at the end of the month you have to report to your > customer that he has X Gb of free traffic, Y Gb of cheap traffic > and Z Gb of expensive. And he may request a detalization. Sure. I do understand that. What I question is the use of tools to do that. Especially if you are using the right tools to do that. Do you really log all Netflow packets to disk to be able to provide details to the customer? Or do you aggregate the details on the collector? -- Andre