Monitoring Network Traffic

Unanswered Question

We have a Cisco ASA5510 in place. We currently do not have any additional network monitoring tools in place other than the tools on the ASA itself and wireshark.

Lateley our connection to \ from the internet has been getting maxed out, when looking at the outside interface graph on the ASA it shows a straight line accross the top at the maxed out limit.

How can I determine, in real time who is killing our internet?

Please help

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading. Wed, 07/29/2009 - 03:22
User Badges:

NetFlow from ASA is currently not supported by most of the NetFlow based tool vendors. NetFlow from ASA devices, termed as NetFlow Secure Event Logging (NSEL) is based on NetFlow version 9.

The NSEL is based on events triggered on the firewall devices and is different from the normal NetFlow packets. These packets do not have information which can be used properly for traffic monitoring.

You may have to wait for a bit longer for vendors to start supporting this new NetFlow.


This Discussion