Howdy Pep-Folks,
I was wondering what you folks recommend for a Netflow/IPFIX Collector that works well with Peplink routers. Auvik looks interesting but I don’t think most of the features would be compatible with Peplink.
Thanks!
Auvik also get’s incredibly expensive for what it is once you add a decent number of end devices on it.
Last I tried their Netflow collector was also really primitive and offered little in the way of actual insights or analysis, maybe that has changed though.
If you wanted something Open Source have a look at Akvorado, we use this ourselves, though I’m not collecting flow data from Peplink but I don’t really see a reason why it wouldn’t work.
I’ve setup an Akvorado server (using a modified Docker compose file) on a Peplink ecosystem. Works like a charm. Tip: use IPFIX, not Netflow in your Pep settings.
Also keep in mind what you want to use this tool for: monitoring the big traffic flows between different AS/networks, or doing in-depth investigation about which nodes are setting up which sessions at what time with what bandwidth over a longer period. For the first, this is perfect. For the second, notice you need the basic detailed data tables for a longer time, as SrcAddr, SrcPort, DstAddr and DstPort are deleted once you go to aggregated data.
1 Like