[c-nsp] Re: Netflow & ntop

[neal rauhauser]

   I tried using Ntop as a netflow collector in a couple of different 
places and I never could get it to behave. We used FreeBSD 5.4 with both 
the patched default libpcap and the libpcap from ports. The failure mode 
was always the same - it would accept flows for a while, then it just 
gave up - its been a while but I think what was in the logs indicated it 
was some sort of internal data structure overflow. This happened with a 
50% loaded DS3 that had about 12k public IP addresses behind it. I also 
saw similar problems on a network of five routers connected via T1 with 
a single T1 to the internet.

   We have had very good luck with ManagerEngine's Netflow Analyzer 4.0 
-  both of the customers I describe above purchased it and its working 
for them. The NFA will take all netflow data, you give it the SNMP 
communities for the routers you want to monitor, and it combines the 
features of Ntop and mrtg - very slick, very well done. They make a 
Windows and a Linux version, both of which you can evaluate for free.






Melvin C. Etheridge wrote:
> Do you need help with the Ntop config or the Cisco config?
> 
> I'm running the windows version of Ntop 3.2 for monitoring a 3640 that I use 
> for my ADSL customers.
> 
> Mel
> 
> ----- Original Message ----- 
> From: "Kanagaraj Krishna" <kanagaraj at aims.com.my>
> To: <cisco-nsp at puck.nether.net>
> Sent: Thursday, February 09, 2006 7:59 AM
> Subject: [c-nsp] Re: Netflow & ntop
> 
> 
>> Hi,
>>   I'm trying to use ntop as the netflow collecter for one of my Cisco box.
>> I'm having difficulties in setting this up (lack of documentations on the
>> subject). Has anyone out there been able do a similar setup? If yes, 
>> please
>> share your thoughts on :
>>
>> - is ntop able to act as a netflow collector (certain websites mentioned 
>> that
>>  the current ntop version doesn't support it)?
>>
>> - resources/tutorials/example on this kind of setup?
>>
>> Thanks,
>> Kanagaraj Krishna
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 


-- 
mailto:Neal at Layer3Arts.com // IM:layer3arts
voice: 402 408 5951
cell : 402 301 9555
fax  : 402 408 6902