Reading netflow packets

Unanswered Question
Jul 20th, 2010

Hello Everyone ,

I'm configuring my Cisco 4500 for exporting the netflow packets for view traffic detail for protocol and ip adress.

I'm see via Wireshark, the packets are send to my computer in the port 9996 and version 5. I'm using ntop for recieve this packets, but, it is not possible, the fotware says "no packets for listening".

Can anyone tell  me some software to make reading of netflow packets? Preferably, it is freeware, I'm in the process of  approval of the operation.

Tks a lot.

Rafael Mendes

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
jakewilson Tue, 07/20/2010 - 11:11

Hello,

If you just want to see if the packets are coming in, use Flowalyzer.  It is a lightweight no analysis collector and is just for troubleshooting.  Make sure the NetFlow collector isn't listening on the same ports else, Flowalyzer will prompt you to remove the listening port.

If serious analysis of NetFlow, please consider Scrutinizer. The free version has lots of reports, but drops the data @ 3AM ET everyday.

Jake

Actions

This Discussion