North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RE: Help needed - Cisco Netflow

  • From: Kocher, Keith
  • Date: Fri Oct 10 13:17:45 2008 
Open source netlow collector NTOP:      http://www.ntop.org

-----Original Message-----
From: Mills, Charles [mailto:[email protected]]
Sent: Friday, October 10, 2008 12:46 PM
To: Lee, Steven (NSG Malaysia); [email protected]
Subject: RE: Help needed - Cisco Netflow

Lee,
    The question would be do you want a self contained appliance or a
piece of software?  I have used Advent Network's Net Flow Analyzer.
There are others out there but I've had some decent amount of luck with
these guys and they have an "Enterprise" license that will many, many
(thousands?) interfaces.
     For the traffic load and the number of flows/second I'm guessing
you'll need a really high end Linux box with lots and lots of disk
space.
     There are open source netflow collectors too you could deal with if
cost is an issue or you have the talent on staff to maintain it.

Chuck

-----Original Message-----
From: Lee, Steven (NSG Malaysia) [mailto:[email protected]]
Sent: Friday, October 10, 2008 12:17 PM
To: [email protected]
Subject: Help needed - Cisco Netflow

Hi all, I have a customer who has a MPLS network for E/// Media Gateway
(MGW) NB-AMR VoIP traffic. The packet size for the NB-AMR traffic is
fixed size 110 bytes. During the high load period, it can reaches
450Kpps on a STM-1 link. The router platform is Cisco 12000 series, can
the router generate 100% netflow data with such traffic load? Also can
someone suggest a carrier class netflow collector for mobile service
provider environment.

Thanks in advance.

Regards,
Steven Lee


This e-mail message and any files transmitted with it contain confidential information intended only for the person(s) to whom this email message is addressed. If you have received this e-mail message in error, please notify the sender immediately by telephone or e-mail and destroy the original message without making a copy.  Thank you.
Neither this information block, the typed name of the sender, nor anything else in this message is intended to constitute an electronic signature unless a specific statement to the contrary is included in this message.