[c-nsp] netflow only on ingress and HSRP setup
Joe Loiacono
jloiacon at csc.com
Fri Oct 17 17:19:30 EDT 2008
cisco-nsp-bounces at puck.nether.net wrote on 10/17/2008 02:40:55 PM:
> On Thu, Oct 16, 2008 at 10:55:29AM +0000, Borg Tinderne wrote:
> > Raw netflow is a box centric view of network traffic,????the few
netflow
> > display products I have played with over the last decade or so
continue
> > with this box-centric view , can't comment on nfsen.???? As
interesting
> > as a box-centric view is,?? I generally find I want a network-centric
> > view of network traffic,?? so post processing of flow data with
something
> > ,??for me this has been RYO, so??choose your own poison ( perl / sql /
> > tcl??/ awk ..??)??.??
>
> w/ flow-tools you can write flow-nfilter such that you aggregate
> networks into abstractions and tag them. then you generate your rrd
> (or whatever) by-tag instead of by-host. not hard.
^^^^^^^^^^^^^
Yep. You could substitute the directory name, which you used to store the
tagged aggregate, for a device-name in FlowViewer, and you will have
access to the whole set of those web tools.
Joe
More information about the cisco-nsp
mailing list