Tail-F NCS can change the way existing and future networks are managed - Feb 4, 2014
[…] Tail-F NCS can change the way existing and future networks are managed […] One CLI to rule them all? It’s more than that. | NetworkN3rd | Ed Henry's Blog - Mar 1, 2014
[…] seem they’ve developed an appliance that can effectively, as Nick Buraglio wrote in his post here, the Rosetta Stone for all of the vendor NOSes that exist […]
“Hopefully there are some things here that will make you really upset in a very good way” is how Carl Moberg of Swedish based company tail-f opened up to the crowd at Networking Field Day 7 on Feb 19, 2014. Tail-f is a sleeper, I had actually never heard of them before NFD7, but they’ve got a very unique product in NCS and in my opinion it can change the way existing and future networks are managed.
Network Field Day 7 - Feb 2, 2014
[…] Network Field Day 7 […]
A while ago I got an email asking me to participate in Network Field Day 7. I was very happy and humbled to get asked again since I wasn’t able to attend NFD5 or NFD6 for various reasons outside of my control (although I did try to participate with NFD5 remotely). If you’re unfamiliar with the tech field day series, you should spend a little time and learn about the value it brings.
Internets of Interest for 20th January 2014 — EtherealMind - Jan 1, 2014
[…] Drink from the firehose! Implement NetFlow data on your network with nfdump and nfsen – Nick Buraglio on open source sFlow/NetFlow tool nfsen : […] Technology Short Take #38 - blog.scottlowe.org - The weblog of an IT pro specializing in virtualization, networking, storage, and servers - Feb 4, 2014
[…] Nick Buraglio takes away all your reasons for not collecting flow-based data from your environment with his write-up on installing nfsen and nfdump for NetFlow and/or sFlow collection.
I am an absolutely huge fan of statistical and instrumentation data, especially when it comes to traffic analysis, visualization and baselining. I’ve rambled on about the importance of it at every opportunity. As a result of that, I have been doing work with netflow and netflow-like data for a fairly long time. My first collector was the OSU Flow tools based stuff back around 13 years ago. From there I played with all kinds of netflow tools, both commercial and open source, finally settling most of my focus on nfdump and nfsen.
[Ryan Harden]( “ancker@ancker.net”) - Jan 1, 2014
Not trying to brush this off as not-scary or not-happening, but I’m skeptical of the reality of some of this. Not only would you have to alter the code on a JNPR/CSCO/etc router or switch, but you’d also have to alter the code of any inline firewalls to pass the secret traffic without filtering and/or logging, and alter the code of any flow generation/aggregation/analyzation software to not report on the secret traffic that it might have observed via tap/SPAN/etc.