Netflow collector tool

Unanswered Question
Sep 13th, 2007
User Badges:
  • Red, 2250 points or more

We have a prospect who is interested in using NetFlow for accounting of the Internet traffic of their various departments.

They are a small to medium business.

Internet bandwidth will be 50Mb non-overbooked.

The network will be a 3750 stack and I was considering the 2821 as the device to monitor the flows. Any comments on that?

My most impotant question is: What would be suitable for the monitoring tool?

Which platform?

Which software?


regards,

Leo


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (3 ratings)
Loading.
lgijssel Thu, 09/13/2007 - 01:19
User Badges:
  • Red, 2250 points or more

Thanks Spremkumar!


peter.nowack Thu, 09/13/2007 - 01:49
User Badges:

Hello,

netflow is NOT supported on a 3750 device!!!

I can recommend Caligare Flow Inspector software. We are using it for 2 years. Last year they implemented network anomalies detection, so this feature help me many times to locate infected stations (by worms) in our network. See: http://www.caligare.com/ You can also check other software on the URL: http://netflow.caligare.com/applications.htm

There are about 30 other netflow software developers. We tried Netflow tracker (it seems OK, but we needed more detail searching) and PRTG (it is not suitable for us, too simple, but it support sflow and it can be run on windows server, etc...). I also saw installation of Arbor software. It is a very huge, really nice software, but we are middle size company and their price was also a huge ;-( I think that this software is more suitable for ISPes.



Best regards


Peter


royalblues Thu, 09/13/2007 - 01:55
User Badges:
  • Green, 3000 points or more

I think the user is trying to identify the traffic on his internet pipe which is connected to the 28xx box.


28xx would support neflow and can send all neflow traffic to the management station for monitoring


HTH

Narayan

peter.nowack Thu, 09/13/2007 - 02:05
User Badges:

Ooh, sorry, it is a my fault. You have right, a netflow is supported on 28xx series. So if he collect on 2800 he will be able to see all trafic going to/from ISP.


Peter

spremkumar Thu, 09/13/2007 - 02:08
User Badges:
  • Red, 2250 points or more

Hi Peter


The link posted in ur prev msg looks quite useful :)



regds


lgijssel Thu, 09/13/2007 - 03:09
User Badges:
  • Red, 2250 points or more

Peter, I was not intending to use the 3750 for netflow, as you can read in my post I intend to implement this on a 2821.

Anyway, thank you for the response which was rated accordingly.


regards,

Leo

Actions

This Discussion