IPFix Collectors are becoming more popular with hardware vendors due to the integration of the network analyzing protocol being open to multiple vendors and the standardization it offers as well.
NetFlow is fairly limited to Cisco products and a select few of other vendors, but the introduction of IPFix has given the industry a better way to monitor network flows and a array of additional information in ways Netflow isn't capable of doing.
IPFix is the technology that allows for the capture and analyzing of flow information from layer-3 switches, routers and firewalls to a central IPFix Collector Software on your network.
Here is our list of the top OPFix collectors:
- SolarWinds Network Bandwidth Analyzer Pack – FREE TRIAL This package of two network monitoring and management systems gives you constant network device monitoring, plus traffic pattern tracking using IPFIX, sFlow, NetStream, J-Flow, and NetFlow. Runs on Windows Server.
- Noction Flow Analyzer – FREE TRIAL This package of network monitoring and management system watches over live network performance as well as offering network traffic analysis. Runs on Linux.
- ManageEngine NetFlow Analyzer – FREE TRIAL This package will monitor a single-site network or, in a higher plan, a WAN. The tool includes a capacity planning analyzer. Available for Windows Server and Linux.
- nProbe Use this package capture tool with the Ntop server and front ends to get network monitoring and traffic analysis facilities. Installs on Linux and Windows.
- IsarFlow This monitoring package uses IPFIX, NetFlow, and SNMP to gather traffic performance statistics and manage QoS. Implemented as an appliance
- NetFlow Auditor This package offers a range of network services, including NetFlow, IPFIX, sFlow, J-Flow, AppFlow and NetStream data extraction. The bundle also offers security monitoring. Available for Windows and Linux.
- Plixer Scrutinizer This monitoring package is offered in seven plans that include a free tier and performs network traffic analysis with IPFIX, NetFlow, NetStream, sFlow, and J-Flow. Offered as a network appliance or as a virtual appliance over a hypervisor.
IPFix differs from NetFlow in such a way that it allows for different types of information to be captured from the device, including proprietary information that a Vendor ID can integrate into the device and also has the ability to receive information about Syslog and SNMP that would otherwise be sent to those respective services/collectors.
This will further cut down on network overhead and allow you to collect, organize, filter and analyze all the information from one software package rather than from multiple software packages.
We've highlighted some of the Best IPfix Collector software packages below along with a quick overview of what each software does.
Some of these are Freeware and others have Free Trials that are worth checking out, and some are Open Source.
We've had good success downloading a trial version and testing it out and getting a good feel for it.
Here's the Best Free & Paid IPFix Collectors & Analyzers:
Below you'll find some IPFix Collectors that also double as IPFix Analyzers – some of these are free and others are paid and they will all give you a great understanding of how flexible the protocol can be when setting it up correctly.
We Suggest that you download one of them and test it out on your network to get a better understanding of how it works and how flexible the software really is.
Collecting and analyzing data using IPFix will give you a great understanding of what is really going on within your LAN/WAN and see what services, websites, machines and other devices are using the most bandwidth on your network.
These software packages also work great when you need to Monitor your Bandwidth on your Network and Web Browsing.
The SolarWinds Network Bandwidth Analyzer software package includes all the features you need to collector IPFix Flow information and packets as well as any other protocols that your network may be putting out.
It includes automatic discovery of devices as well as network performance, fault and availability monitoring bundled into it.
The bundle also includes the Network Performance Monitor with gives you a great overview of network devices and their bandwidth consumption and usage, as well as a easy-to-use dashboard that can be setup with Alerts and reports.
The NetFlow/IPFix Collector/Analyzer portion of the bundled software is called Netflow Traffic Analyzer and it supports IPFIX, as well as Cisco Netflow, Juniper J-Flow, sFlow, Huawei Netstream and other flow protocols and data.
Download a 30-day free trial and Test the Collector/Analyzer on your Network Free.
Noction Flow Analyzer is a good choice for networks that operate a multi-vendor environment because it is able to communicate with switches and routers exporting Netflow, J-Flow, sFlow, IPFIX, and NetStream including:
- Juniper Networks
- Cisco Systems
- Hewlett Packard Enterprise
- Extreme Networks
- Huawei, and other
As well as gathering live traffic statistics, the Flow Analyzer offers capacity planning analysis and live network performance monitoring.
This system installs on Linux, specifically Ubuntu, CentOS, or RHEL. The package forms a Web server and the dashboard is delivered as an intranet website that users access through any standard Web browser. You can get a 30-day free trial of Noction Flow Analyzer.
ManageEngine Netflow analyzer has IPFix Monitoring capabilities that makes it a good option for those looking for a nicely laid out program to manage & analyze IPFIX traffic.
This tool has capabilities of not only Monitoring IPFix, but also:
- and other protocols!
We suggest you give this tool a try and see how well it performs in your network! You'll be pleasantly surprised with the ease of use and its capabilities!
nProbe is a great IPFix probe that not only acts as a great Analyzer, but also as a Collector that can collect IPFix flows into a Database (MySql, Fastbit and sqlite). nProbe coupled with nTop works great for processing tons of flow information on larger networks, acting as a pre-processor by capturing packets from network interfaces, computing the flows based on the packets being sent and then sending them off to ntop for further collection, organization and analysis.
nProbe is available for most operating systems including Windows, BSD, Linux and even Mac OSX. nProbe also supports Netflow v4/v5/v9 on top of IPFix .
IsarFlow is great little tool that provides network monitoring using IPFix as well as Netflow and SNMP data to collect and analyze network information and usage.
It provides information on about your network that can prove to be valuable in analyzing usage and billing patterns that can be addressed and billed properly.
Things like Network load, compliance with SLA's, QOS and traffic flow analysis can all be monitored using this tool.
Data can be customized by the network engineer/admin to generate customized reports that are personalized to different criteria and requirements.
6. NetFlow Auditor
It fully supports IPv6 along with Real-time analysis of packets and usage.
This software packages allows admins and engineers a comprehensive look into their network, along with robust features including Intrusion detection (IDS) and Security and information Event Management (SIEM).
This full featured tools allows for count analysis, which helps with analyzing P2P activity, DoS Attacks and Port scanning activities against your network.
It also includes features such has Percentile, Packet Size, Deviation, Bi-directional and many of types of Analysis for a very in-depth look at the network flow information that is coming and going within your network.
This software runs on Windows and Linux (including Redhat/Centos) according to their website and supports Firefox, Chrome or Internet Explorer supporting SVG/HTML5.
7. Plixer Scrutinizer
Plixer Scrutinizer (which has a Freeware version available) is flow analyzer software that has the ability to not only be installed on a system of your choice, but Plixer has also given companies the open to buy a Hardware appliance or a Virtual (VMware) Appliance that are both highly scalable in terms of Flows Per Second and number of devices.
The Hardware appliance can collect over 150,000 flows per second from over 1000 devices and the Virtual appliance can scale up to 1000 devices and collect up to 40,000 flows per second – These are both vastly greater than the 10,000 Flows per second and 100's of devices that the Windows installers allows for.
One of the major benefits of Plixer Scrutinizer is its ability to scale to both hardware and virtual appliances giving it a distributed architecture and allowing for more collectors to be implemented at different locations of your network infrastructure.
Scrutinizer not only supports IPFix, but netflow, sFlow, j-Flow and Netstream, making it very robust as many of the other software packages as well.
Grab a Free Download and give it a Test Drive
Make sure to download one of the above IPFix Collectors and Analyzers to get a better feel for what each of them does.
Most of the software mentioned above will have a Free Trial version that can be downloaded and installed on your machine to test out their respective capabilities and features.