netflow for Linux

Hello,

does anyone know if there is something that can do netflow, just like for
example a Cisco router.
I don´t mean ntop, but a a program that talks the netflow protocol.
or maybe an alternative (other then ntop)?
I´m interested in the flows. Maybe samething like argus
(http://www.qosient.com/argus/)

thanks,
-Andree

Andree Toonk <(E-Mail Removed)> wrote:

> does anyone know if there is something that can do netflow, just like for
> example a Cisco router.
> I don?t mean ntop, but a a program that talks the netflow protocol.
> or maybe an alternative (other then ntop)?

I've never used it myself, but I've noticed that there are such programs
available under Debian

$ apt-cache search netflow
flow-tools - collects and processes NetFlow data
fprobe - exports NetFlow V5 datagrams to a remote collector
libcflow-perl - Perl module for analyzing raw IP flow files written by
cflowd

I think you'll find that flow-tools and fprobe comes straight from the IEEE
designers of the protocol (now that netflow is an official protocol)

$ apt-cache show fprobe
Package: fprobe
Description: exports NetFlow V5 datagrams to a remote collector
This is a small NetFlow probe which will listen on a interface using libpcap,
aggregate the traffic and export NetFlow V5 datagram to a remote collector
for processing. A flow is identified by ip protocol, source ip, source port,
destination ip, destination port. Right now only ethernet interfaces are
supported. Support for more media types (tunnel, ppp etc) will be added.

"Cameron Kerr" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...

> I've never used it myself, but I've noticed that there are such programs
> available under Debian
>
> $ apt-cache search netflow
> flow-tools - collects and processes NetFlow data
> fprobe - exports NetFlow V5 datagrams to a remote collector

Perfect! fprobe was what I was looking for!
thnx
Andree