[j-nsp] SRX210 + AppTrack. How to analyse?

Skeeve Stevens skeeve+junipernsp at eintellegonetworks.com
Mon Aug 12 21:03:44 EDT 2013


Excellent, thanks Tim.


...Skeeve

*Skeeve Stevens - *eintellego Networks Pty Ltd
skeeve at eintellegonetworks.com ; www.eintellegonetworks.com

Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve

facebook.com/eintellegonetworks ;  <http://twitter.com/networkceoau>
linkedin.com/in/skeeve

twitter.com/networkceoau ; blog: www.network-ceo.net


The Experts Who The Experts Call
Juniper - Cisco - Cloud


On Mon, Aug 12, 2013 at 4:11 PM, Tim Eberhard <xmin0s at gmail.com> wrote:

> I gave a talk on this at the bajug2. There are a couple of ways to do
> this, take a look at the slides from my talk. found here:
> http://www.slideshare.net/timeberhard/tim-eberhard-bajug3talk
>
> It also covers a tool I wrote to analyze the session tables and syslog
> messages for top talkers.
>
> Sure, in my example I used STRM but in reality you can use one of the many
> open source netflow analyzers.
>
> Hope this helps,
> Tim Eberhard
>
>
> On Sun, Aug 11, 2013 at 10:11 PM, Skeeve Stevens <
> skeeve+junipernsp at eintellegonetworks.com> wrote:
>
>> Hey all,
>>
>> I have a customer in a bandwidth sensitive location (expensive and slow),
>> and they would like to know what is going through their device, and who is
>> doing it.
>>
>> In Cisco terms, this was NBAR - we used it many times to track down
>> bandwidth hogs.
>>
>> This is a small branch site using a SRX210H, and obviously STRM is too
>> expensive for a reporting engine.
>>
>> So what I am looking for is... How can we look at their device, and see
>> what is happening (preferably live) on a protocol and user (IP?) basis.
>>
>> I understand it can export to syslog, but that just gives me lots of text
>> to deal with... nothing that is easy to look at.
>>
>> Thank you for helping out guys!
>>
>> ...Skeeve
>>
>> *Skeeve Stevens - *eintellego Networks Pty Ltd
>> skeeve at eintellegonetworks.com ; www.eintellegonetworks.com
>>
>> Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve
>>
>> facebook.com/eintellegonetworks ;  <http://twitter.com/networkceoau>
>> linkedin.com/in/skeeve
>>
>> twitter.com/networkceoau ; blog: www.network-ceo.net
>>
>>
>> The Experts Who The Experts Call
>> Juniper - Cisco - Cloud
>> _______________________________________________
>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/juniper-nsp
>>
>
>


More information about the juniper-nsp mailing list