[c-nsp] netflow only on ingress and HSRP setup

bill fumerola billf at mu.org
Fri Oct 17 14:40:55 EDT 2008


On Thu, Oct 16, 2008 at 10:55:29AM +0000, Borg Tinderne wrote:
> Raw netflow is a box centric view of network traffic,????the few netflow
> display products I have played with over the last decade or so continue
> with this box-centric view , can't comment on nfsen.???? As interesting
> as a box-centric view is,?? I generally find I want a network-centric
> view of network traffic,?? so post processing of flow data with something
> ,??for me this has been RYO, so??choose your own poison ( perl / sql /
> tcl??/ awk ..??)??.??

w/ flow-tools you can write flow-nfilter such that you aggregate
networks into abstractions and tag them. then you generate your rrd (or
whatever) by-tag instead of by-host. not hard.

- bill


More information about the cisco-nsp mailing list