= renetcol home page = renetcol ([http://www.renater.fr RENATER] [http://www.cisco.com/en/US/products/ps6601/products_ios_protocol_group_home.html NetFlow] Collector) is a NetFlow collector under GPL. NetFlow is a technology originally proposed by [http://www.cisco.com Cisco], that is currently under standardization in [http://www.ietf.org/html.charters/ipfix-charter.html IPFIX] IETF working group. renetcol works with '''!NetFlow Data Export version 9''', which allows to monitor IPv6, Multicast and MPLS flows, in addition to the IPv4 ones. The main functionnalities of renetcol are: * Real-time NetFlow viewer (if you've ever dreamed of using tcpdump on an IP operator backbone, you should test renetcol) * RRD accounting for IPv4 subnet (CIDR) * RRD accounting for BGP AS number * RRD accounting for IPv6 links (new in release 0.0.14) * Inter-POP flows Matrix * DoS attack detection === Screenshots and graphic examples === * Web interface [wiki:wint here] * Class of services traffic distribution for an IPv4 prefix: [wiki:cos here] * Real-time flow monitoring: [wiki:rtfm here] * Examples of different possibility of flow selection: [wiki:tipfields here] * IPv6 Weathermap of RENATER backbone (with [http://code.google.com/p/yanmp/ YANMP]): [http://pasillo.renater.fr/weathermap/weathermap_france_ipv6.html here] === Next features === * Flow historic * Accounting for IPv6 subnet * DDoS detection * nfcapd format export done: * New architecture of core: SMP arch, to reached the million of flows per second (fps) on a single hardware. === Online documentation === * [wiki:renetcolTIPS install documentation] === White Paper === * [attachment:RENETCOL_Different_USE_CASES.pdf Different use cases] * [attachment:RENETCOL_USE_in_RENATER.pdf RENETCOL use in RENATER] === Mailing-list === {{{ #!html Subscribe }}} === renetcol in production === * [wiki:usage1 renetcol on RENATER] === !HowTo === * [wiki:renetcolGUI Real-time flow monitoring with renetcolGUI] === Links === === Author === * Andreu François-Xavier === Thanks to === * CERT RENATER (for his daily usage of renetcolGUI) * Anthony Fisson (for syslog section and discussions about SMP architecture)