AfNOG@Mar 22, 2009

Date: Sun, 22 Mar 2009 09:30:44 +0800
From: Mark Tinka
Subject: Re: [afnog] Data mining for African ISP
To: Global One Solutions
Cc: discuss , afnog@afnog.org
Message-ID: <200903220930.52725.mtinka@globaltransit.net>
Content-Type: text/plain; charset="iso-8859-6"

On Sunday 22 March 2009 03:30:42 am Global One Solutions
wrote:

> I would like to hear what our local ISP in African is
> using for data-mining, which helps them deal with (a)
> with DDoS attack, (b) Understand their traffic pattern,
> which helps them plan their capacity planning. I know
> DDoS attack is very critical to the operation folks and
> some of us used or still use home grown application. You
> can buzz offline if you want to. Any feedback is greatly
> appreciated.

These are typical applications of NetFlow/cflowd in IOS and
JunOS.

There's a lot of non-commercial flow collectors, e.g.,
Nfsen/Nfdump, as well as commercial products that work quite
well, e.g., Arbor Networks.

Other folks may use NTOP for the same, as well.

Cheers,

Mark.

DDoSアタックとか、トラフィック傾向とか知る為に、データマイニングに何を使えばいい？という質問に対する返答。
一般的にはIOSやJunOSで、お金を掛けないならNfsen/Nfdumpと、この辺りは先進国と状況変わらず。
あとのメールでもエンジニアのスキルとお金が必要という非常に的確なコメントも。