Netflow collector tool

Unanswered Question
Sep 13th, 2007

We have a prospect who is interested in using NetFlow for accounting of the Internet traffic of their various departments.

They are a small to medium business.

Internet bandwidth will be 50Mb non-overbooked.

The network will be a 3750 stack and I was considering the 2821 as the device to monitor the flows. Any comments on that?

My most impotant question is: What would be suitable for the monitoring tool?

Which platform?

Which software?

regards,

Leo

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (3 ratings)
Loading.
peter.nowack Thu, 09/13/2007 - 01:49

Hello,

netflow is NOT supported on a 3750 device!!!

I can recommend Caligare Flow Inspector software. We are using it for 2 years. Last year they implemented network anomalies detection, so this feature help me many times to locate infected stations (by worms) in our network. See: http://www.caligare.com/ You can also check other software on the URL: http://netflow.caligare.com/applications.htm

There are about 30 other netflow software developers. We tried Netflow tracker (it seems OK, but we needed more detail searching) and PRTG (it is not suitable for us, too simple, but it support sflow and it can be run on windows server, etc...). I also saw installation of Arbor software. It is a very huge, really nice software, but we are middle size company and their price was also a huge ;-( I think that this software is more suitable for ISPes.

Best regards

Peter

royalblues Thu, 09/13/2007 - 01:55

I think the user is trying to identify the traffic on his internet pipe which is connected to the 28xx box.

28xx would support neflow and can send all neflow traffic to the management station for monitoring

HTH

Narayan

peter.nowack Thu, 09/13/2007 - 02:05

Ooh, sorry, it is a my fault. You have right, a netflow is supported on 28xx series. So if he collect on 2800 he will be able to see all trafic going to/from ISP.

Peter

spremkumar Thu, 09/13/2007 - 02:08

Hi Peter

The link posted in ur prev msg looks quite useful :)

regds

lgijssel Thu, 09/13/2007 - 03:09

Peter, I was not intending to use the 3750 for netflow, as you can read in my post I intend to implement this on a 2821.

Anyway, thank you for the response which was rated accordingly.

regards,

Leo

Actions

This Discussion