[c-nsp] Netflow analyzer suggestions

Andy Dills andy at xecu.net
Tue Jun 2 15:21:12 EDT 2009


Hi there,

Apologies for the non-cisco specific post, but I couldn't think of a 
better list to post to off of the top of my head.

A friend of mine is looking to get some better visibility into their 
network usage (low bandwidth, T1 type scenario). I got them setup with an 
IOS that supports netflow v9, and since they had a freebsd box being 
barely used, I built ntop to be their collector/analyzer.

It works reasonably well, but it's perhaps not quite...user friendly 
enough for them.

What they're looking for is a graphical representation at the host level. 
In essence, they're looking for something like cricket/mrtg but with each 
IP having its own graph (rather than each interface). Additional features, 
such as protocol breakdown and so forth are helpful, but the primary 
desire is to be able to see how much bandwidth a given IP address is using 
currently and was using in the past.

They're open to commercial solutions, but would prefer to keep costs down. 
Host operating system requirements for the collector/analyzer aren't 
important.

Does anybody have any suggestions they could pass along?

Thanks,
Andy

---
Andy Dills
Xecunet, Inc.
www.xecu.net
301-682-9972
---


More information about the cisco-nsp mailing list