[prev in list] [next in list] [prev in thread] [next in thread] 

List:       nanog
Subject:    Re: netflow in the core used for surveillance
From:       Avi Freedman <avi () kentik ! com>
Date:       2021-08-30 16:24:57
Message-ID: CALUDhBMPRfwHr9Nr7e=qBggw72P4JF4S=VCQ7qhKkDs5Jr3uAw () mail ! gmail ! com
[Download RAW message or body]

Hi, all.

Re: last week's thread on the Vice article -

I can only speak for Kentik, and *we* don't resell or give 3rd party access
to NetFlow data from our hundreds of customers.  And never have.

But there is definitely interest out there.  We do get approached about it
periodically and always say no.  Mostly by commercial vendors and not (at
least directly) by governmental bodies.

Of course, our *customers* could in theory share their data via API key, or
by using our outbound streaming firehose.  But I've never talked to a
customer who wanted to share their flow data with a 3rd party.  Usually by
far the opposite.

The closest thing to this that our customers do ask about is re: aggregate
community views, which people could contribute to to help themselves and
the community.  While we don't do this now, if and when we do it: 1) won't
be with raw data, 2) will be opt-in only, 3) will be designed with
customers and have open methodology; and 4) will be likely with synthetic
test, BGP, device metrics, and other non-flow data to start.

Thanks,

Avi

[Attachment #3 (text/html)]

<div dir="ltr"><div style="font-family:Arial"><br></div><div \
style="font-family:Arial">Hi, all.<br></div><div \
style="font-family:Arial"><br></div><div style="font-family:Arial">Re: last \
week&#39;s thread on the Vice article -</div><div \
style="font-family:Arial"><br></div><div style="font-family:Arial">I can only speak \
for Kentik, and <b>we</b> don&#39;t resell or give 3rd party access to NetFlow data \
from our hundreds of customers.   And never have.    <br></div><div \
style="font-family:Arial"><br>But there is definitely interest out there.   We do get \
approached about it periodically and always say no.   Mostly by commercial vendors \
and not (at least directly) by governmental bodies.</div><div \
style="font-family:Arial"><br></div><div style="font-family:Arial">Of course, our \
<b>customers</b> could in theory share their data via API key, or by using our \
outbound streaming firehose.   But I&#39;ve never talked to a customer who wanted to \
share their flow data with a 3rd party.   Usually by far the opposite.<br></div><div \
style="font-family:Arial"><br></div><div style="font-family:Arial">The closest thing \
to this that our customers do ask about is re: aggregate community views, which \
people could contribute to to help themselves and the community.   While we don&#39;t \
do this now, if and when we do it: 1) won&#39;t be with raw data, 2) will be opt-in \
only, 3) will be designed with customers and have open methodology; and 4) will be \
likely with synthetic test, BGP, device metrics, and other non-flow data to start.    \
</div><div style="font-family:Arial"><br></div><div \
style="font-family:Arial">Thanks,</div><div style="font-family:Arial"><br></div><div \
style="font-family:Arial">Avi</div></div>



[prev in list] [next in list] [prev in thread] [next in thread]