×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Net flow collector

Unanswered Question
Jun 30th, 2010
User Badges:

Hi,

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"טבלה רגילה"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0cm 5.4pt 0cm 5.4pt; mso-para-margin:0cm; mso-para-margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:10.0pt; font-family:"Times New Roman","serif";}

I am seeking for solution to my customer . They need a solution that will give them the ability to analyze the ip conversations between hosts.


1.       Ability to analyze host to host conversation in a byte/sec and packets/sec granularity.

2.       Ability to analyze subnet to subnet\host conversation in a byte/sec and packets/sec granularity.

3.       Ability to export the data saved to a third party device – some kind of API

I thought about cisco net flow collector (NFC) product. Since I didn’t work with it I don’t know its capabilities.


Do you know if the NFC support these features ?


thanks,

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Jan Nejman Thu, 07/01/2010 - 00:37
User Badges:
  • Bronze, 100 points or more

Hello,

I can offer you our software Caligare Flow Inspector (http://www.caligare.com). It is a pure NetFlow analyzer,

which met all your requirements. Flows are stored in SQL tables in easy format, so can run all your queries

directly in SQL. Table format is [h|d|w|m][collector_id]_[YYMM[DD[HH]] where h,d,w and m means hourly,

daily, weekly or monthly table. Collector ID is a unique collector identification and the rest is a time format.

See http://www.caligare.com/download/netflow.pdf and appendix section about table fields name, etc ....

Please, feel free to contact me directly on my email nejman (at) caligare (dot) com.


In any case you can use competitors software i.e. Fluke or ManageEngine. Both are using MySQL

for data storage. I have a little knowledge of cisco's NFC, but I know all product mentioned above.


Have a nice day,


Jan Nejman

Caligare, co.

http://www.caligare.com/

Actions

This Discussion