[c-nsp] sampled netflow on 6500

[Mike Louis]

You can use sampled netflow to accomplish the same thing as sflow. Netflow v9 is based on the ipix std so it will offer many of its features

-----Original Message-----
From: Patrick Viet <patrick.viet at gmail.com>
Sent: Friday, November 14, 2008 8:00 PM
To: cisco-nsp at puck.nether.net <cisco-nsp at puck.nether.net>
Subject: [c-nsp] sampled netflow on 6500


Hello everybody,

First of all, I'll introduce myself. I'm Patrick, responsible for a small
French hosting network. It was formely Foundry-based and now it has been
upgraded to Cisco 6500 / SUP720-3BXL routers.

I had been using sflow up to now. It's very simplistic - and worked well for
me with our in-house analysis software. This is how it works : the headers
(source+destination ip/port + packet size + protocol...) of one packet in N
packets is sent to the sflow collector.
The sflow collector uses this sampled data to get a big picture about what
happens in the network.

I like this system. It's not super accurate but accurate enough in my case,
it's simple, and my software knows how to use it.

I have been reading a lot of documentation about Cisco sampled netflow, and
trying out a few config parameters. But it doesn't seem to be able to work
in the same way as sflow.

Is this operating mode available on Cisco ? Do you have any understandable
pointers about this ? Up to now, all I found that looked like what I want up
to now is outdated stuff about Cisco 12000 and IOS 12.0.x

BTW I'm running 12.2(18)SXF15

Thanks,

Patrick
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Note: This message and any attachments is intended solely for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, legally privileged, confidential, and/or exempt from disclosure.  If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited.  If you have received this communication in error, please notify the original sender immediately by telephone or return email and destroy or delete this message along with any attachments immediately.