[c-nsp] Netflow analyzer suggestions

Joe Loiacono jloiacon at csc.com
Tue Jun 2 20:52:38 EDT 2009


One open-source option is flow-tools and FlowViewer. It does exactly what 
you're asking for. But you would have to export v5 or v7. For information 
and screenshots:

http://ensight.eos.nasa.gov/FlowViewer/

Joe



Andy Dills <andy at xecu.net> 
Sent by: cisco-nsp-bounces at puck.nether.net
06/02/2009 03:21 PM

To
cisco-nsp at puck.nether.net
cc

Subject
[c-nsp] Netflow analyzer suggestions







Hi there,

Apologies for the non-cisco specific post, but I couldn't think of a 
better list to post to off of the top of my head.

A friend of mine is looking to get some better visibility into their 
network usage (low bandwidth, T1 type scenario). I got them setup with an 
IOS that supports netflow v9, and since they had a freebsd box being 
barely used, I built ntop to be their collector/analyzer.

It works reasonably well, but it's perhaps not quite...user friendly 
enough for them.

What they're looking for is a graphical representation at the host level. 
In essence, they're looking for something like cricket/mrtg but with each 
IP having its own graph (rather than each interface). Additional features, 

such as protocol breakdown and so forth are helpful, but the primary 
desire is to be able to see how much bandwidth a given IP address is using 

currently and was using in the past.

They're open to commercial solutions, but would prefer to keep costs down. 

Host operating system requirements for the collector/analyzer aren't 
important.

Does anybody have any suggestions they could pass along?

Thanks,
Andy

---
Andy Dills
Xecunet, Inc.
www.xecu.net
301-682-9972
---
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/



More information about the cisco-nsp mailing list