hardware for argus with 10GB link

[Guillaume FORTAINE]

We are the only in the world doing the Flow Metering Process and Flow 
Context Management in Hardware for IPFIX :

http://docs.google.com/viewer?url=http://www.cert.org/flocon/2009/presentations/Celeda_FlexibleFlow.pdf

http://merlin.fit.vutbr.cz/ant/technology/flow_context_management.html

Why should we bother to do it for Argus knowing that there is *no 
market* for it ?

Argus seems more like a security geek tool than other else. There are 
only *2 commercial companies* (Qosient and Bivio) behind it.

Best Regards,

Guillaume FORTAINE



On 04/27/2010 04:07 AM, Carter Bullard wrote:
> I think flow monitoring has proved itself.  IPFIX is evidence that Cisco
> believes that flow monitoring is very important.  Not sure yet that any
> other major router/switch vendor is going to use IPFIX to transport
> their flow data though.
>
> We already have argus running on all the cards you've mentioned, and
> many many more.
>
> What is the market for running it on your card?
> I don't know.
>
>
> On Apr 26, 2010, at 9:37 PM, Guillaume FORTAINE wrote:
>
>    
>> On 04/26/2010 04:53 AM, Carter Bullard wrote:
>>      
>>> So, packet capture cards that use the 16 lane PCI-Express slots in newer
>>> computers should be able to go 10Gbps.  If anyone on the list has such a
>>> beast, we can do some performance testing and tuning, to get argus up to
>>> speed.  I'd be happy to help!!!
>>>
>>>
>>>
>>>        
>> PCI-Express x8 is enough (up to 12 Gbps).  PCI Express Gen 2 provides a 5Gbps/lane throughput.
>>
>> That's why the fastest card on the market are :
>>
>> -Napatech NT20E2 (x8 lane PCI Express 2.0, up to 20 Gbps)
>>
>> http://docs.google.com/viewer?url=http://www.napatech.com/uploads/c_news/108_file_4507.pdf
>>
>>
>> -Endace DAG 9.2X2 (x8 lane PCI Express 2.0, up to 20 Gbps)
>>
>> http://www.endace.com/dag-9.2x2-packet-capture-card.html
>>
>>
>> And my question is still the same :
>>
>> The question is : Is there a market ?
>>
>> Especially, what is the value-add of Argus in comparison to IPFIX ?
>>
>> I look forward to your answer,
>>
>> Best Regards,
>>
>> Guillaume FORTAINE
>>      
>