Netflow collector tool

lgijssel · ‎09-13-2007

We have a prospect who is interested in using NetFlow for accounting of the Internet traffic of their various departments.

They are a small to medium business.

Internet bandwidth will be 50Mb non-overbooked.

The network will be a 3750 stack and I was considering the 2821 as the device to monitor the flows. Any comments on that?

My most impotant question is: What would be suitable for the monitoring tool?

Which platform?

Which software?

regards,

Leo

spremkumar · ‎09-13-2007

Hi Leo

Try Netflow Tracker which is quite good in collecting the flow stats and gives you fair idea on the flows.

it also gives you the top utilisation reports both interface as well as protocols.

you can see more info here..

http://www.crannog-software.com/index.php?go=Product.ShowDetail&ProductID=1

regds

lgijssel · ‎09-13-2007

Thanks Spremkumar!

royalblues · ‎09-13-2007

You can also try Neflow Analyzer

http://manageengine.adventnet.com/products/netflow/index.html

HTH

Narayan

peter.nowack · ‎09-13-2007

Hello,

netflow is NOT supported on a 3750 device!!!

I can recommend Caligare Flow Inspector software. We are using it for 2 years. Last year they implemented network anomalies detection, so this feature help me many times to locate infected stations (by worms) in our network. See: http://www.caligare.com/ You can also check other software on the URL: http://netflow.caligare.com/applications.htm

There are about 30 other netflow software developers. We tried Netflow tracker (it seems OK, but we needed more detail searching) and PRTG (it is not suitable for us, too simple, but it support sflow and it can be run on windows server, etc...). I also saw installation of Arbor software. It is a very huge, really nice software, but we are middle size company and their price was also a huge ;-( I think that this software is more suitable for ISPes.

Best regards

Peter

royalblues · ‎09-13-2007

I think the user is trying to identify the traffic on his internet pipe which is connected to the 28xx box.

28xx would support neflow and can send all neflow traffic to the management station for monitoring

HTH

Narayan

peter.nowack · ‎09-13-2007

Ooh, sorry, it is a my fault. You have right, a netflow is supported on 28xx series. So if he collect on 2800 he will be able to see all trafic going to/from ISP.

Peter

spremkumar · ‎09-13-2007

Hi Peter

The link posted in ur prev msg looks quite useful :)

regds

lgijssel · ‎09-13-2007

Peter, I was not intending to use the 3750 for netflow, as you can read in my post I intend to implement this on a 2821.

Anyway, thank you for the response which was rated accordingly.

regards,

Leo