[unisog] Arbor Network's Peakflow

[Peter Van Epp]

On Tue, May 09, 2006 at 01:20:11PM -0500, Raw, Randy wrote:
> Is anyone using Arbor Network's Peakflow? I have been asked to gather
> some information and preliminary pricing for it and I would like to know
> who is using it and how they like it.
> 
> Thanks.
> 

	While I can't comment on this one I did some years ago try one of the
other flow based commercial packages and found that argus ate its lunch 
(even with a compromise that argus had caught, the vendor's tech support
looking at the data knowing IPs ports and time couldn't make it alert to find
the compromise despite the fact it had the data).  So you may want to look at 
argus (http://www.qosient.com/argus) as well :-) although its not a turn key
solution which may be the attraction here (I've never found the turn key 
solutions very useful but YMMV).

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada