I'm planning nbar to get feel of applications that are traversing my router.
i hope this is the simplest n best until there is anything else we can do excluding netflow et al.
I intend to get an idea of what applications are flowing across the link.
1)Would it be best to have it on wan facing interface or lan facing interface?
2)Its read that this also causes rise in cpu and may cause the device to go awry..is that the case & if so, whats the max threshold it uses.
My current router is having a cpu usage of around 11%.
3) Any other specific things which need to included with nbar to enhance the output i get to be more useful.
Here's a measurement analysis of nbar in action: