Re: Netflow traffic study

Kana wrote:
> I'm working for a medium size ISP providing transit services to
> our customers. We are currently in the process of expanding our
> network which includes addition to our upstream providers. In the
> process of identifying where to put our money into, we want to study
> our customers traffic pattern (destination, type of traffic, region
> etc) before deciding on the most suitable upstream provider that
> fits the bill (coverage and quality). One of the option that we are
> looking into in doing these is the Netflow function on cisco routers.
> I have a few questions regarding this issue:
>
> - Any good (free/open source) software that can analyze (stats, graph
> etc) Netflow data?
> - Any comments on the use of Netflow for this purpose?
> - Any other suggestions in reaching our objectives (other than
> Netflow)?
>
> Hope to get input from you guys out there. Thanks.

What kind of routers are we talking about? I can tell you that our
6500 MSFCII/PFCs went to 100% CPU utilization when *exporting* the
netflow data. But we weren't sampling, we were trying to gather every
packet of every flow. I really like Crannog but it's a commercial
package and not a freeware tool. If you google this group, you'll find
all the packages that people have recommended in the past.


--

hsb


"Somehow I imagined this experience would be more rewarding" Calvin
**************************ROT13 MY ADDRESS*************************
Due to the volume of email that I receive, I may not be able to
reply to emails sent to my account. Please post a followup instead.
********************************************************************
.

Relevant Pages

  • Re: Netflow traffic study
    ... which includes addition to our upstream providers. ... identifying where to put our money into, we want to study our customers ... traffic pattern before ... doing these is the Netflow function on cisco routers. ...
    (comp.dcom.sys.cisco)
  • Re: [TEST/REVIEW] Netflow implementation
    ... >> It may be more efficient to send the netflow data through a small helper ... I was more thinking of doing that on the collector where the Netflow ... Are you going to report to the customer he had 4575 TCP flows ...
    (freebsd-net)
  • Re: Catalyst 3560 netflow accounting
    ... However, due to the nature of how the switch operates, it is ... unable to accurately report the Netflow data to you. ...
    (comp.dcom.sys.cisco)
  • Re: Looking for traffic analysis/monitoring tool
    ... sal paradise wrote: ... To my surprise, I also learned that lots of network equipment can export NetFlow data. ...
    (comp.os.linux.networking)