[c-nsp] netflow only on ingress and HSRP setup

Joe Loiacono jloiacon at csc.com
Fri Oct 17 17:19:30 EDT 2008


cisco-nsp-bounces at puck.nether.net wrote on 10/17/2008 02:40:55 PM:

> On Thu, Oct 16, 2008 at 10:55:29AM +0000, Borg Tinderne wrote:
> > Raw netflow is a box centric view of network traffic,????the few 
netflow
> > display products I have played with over the last decade or so 
continue
> > with this box-centric view , can't comment on nfsen.???? As 
interesting
> > as a box-centric view is,?? I generally find I want a network-centric
> > view of network traffic,?? so post processing of flow data with 
something
> > ,??for me this has been RYO, so??choose your own poison ( perl / sql /
> > tcl??/ awk ..??)??.??
> 
> w/ flow-tools you can write flow-nfilter such that you aggregate
> networks into abstractions and tag them. then you generate your rrd 
> (or whatever) by-tag instead of by-host. not hard.
  ^^^^^^^^^^^^^

Yep. You could substitute the directory name, which you used to store the 
tagged aggregate, for a device-name in FlowViewer, and you will have 
access to the whole set of those web tools.

Joe


More information about the cisco-nsp mailing list