Cisco Netflow Analysis Software
Does anyone have or know of a cisco Netflow collector/reporter available in the public domain? Cisco used to have a basic one available on their website, but now that that they have a commercial product using Netflow, the free software is gone. Dave ----------- David Hares NetworkTwo Communications Phone: 734.827.3620 650 KMS Place FAX: 734.827.3690 Ann Arbor, MI 48108 Email: dhares@networktwo.net
On Wed, 15 Mar 2000, David Hares wrote:
Does anyone have or know of a cisco Netflow collector/reporter available in the public domain?
Cisco used to have a basic one available on their website, but now that that they have a commercial product using Netflow, the free software is gone.
http://www.caida.org/Tools/ cflowd...very easy to install and get basic info from. ---------------------------------------------------------------------- Jon Lewis *jlewis@lewis.org*| Spammers will be winnuked or System Administrator | nestea'd...whatever it takes Atlantic Net | to get the job done. _________http://www.lewis.org/~jlewis/pgp for PGP public key__________
Does anyone have or know of a cisco Netflow collector/reporter available in the public domain?
Cisco used to have a basic one available on their website, but now that that they have a commercial product using Netflow, the free software is gone.
I wouldn't bother with cisco's commercial product. Trying to use that to track real-world flows is like trying to use a kitchen sieve to empty Lake Champlain. A) It seems to barf on datasets > ~1.2GB (the error message was similar to "32478236924") B) Regular java blowups with things like formatNumberException (for big sums) and other java exceptions. This typically causes the app to lose sanity, requiring you to quit and restart it. C) The functionality is weak there's no way to ask for very specific info (e.g. tell me only about AS6172) sorting doesn't put the two halfs of flows together (i.e. you can sort only by either src or dst as) D) stores data in a "different" ASCII format - so the freeware tools aren't usable (at least not that I've found the "real" data so far ...) You're better off with the freeware stuff - if you need/want graphs/charts you can always pipe through sed/perl and into gnuplot... [see later messages for the freeware stuff] - TP On Wed, 15 Mar 2000, David Hares wrote:
Date: Wed, 15 Mar 2000 12:04:29 -0500 From: David Hares <dhares@networktwo.net> To: nanog@merit.edu Subject: Cisco Netflow Analysis Software
Does anyone have or know of a cisco Netflow collector/reporter available in the public domain?
Cisco used to have a basic one available on their website, but now that that they have a commercial product using Netflow, the free software is gone.
Dave
-----------
David Hares NetworkTwo Communications Phone: 734.827.3620 650 KMS Place FAX: 734.827.3690 Ann Arbor, MI 48108 Email: dhares@networktwo.net
On Wed, 15 Mar 2000, David Hares wrote:
Does anyone have or know of a cisco Netflow collector/reporter available in the public domain?
CADIA's cflowd by Daniel McRobb is pretty nice. You can check it out here: http://www.caida.org/Tools/Cflowd The only problem with it is that there are no visualization tools built in, you'll have to write your own or use other people's. But as far as collecting and reporting (text based) on the data, its the best I've seen. later- devin --- Devin P. Anderson Network Operations Stargate Industries Direct: 412.316.1052 Main: 412.316.7827 x1052 FAX: 412.316.7899 --- PGP Key Available ---
participants (5)
-
David Hares -
Devin P. Anderson -
jlewis＠lewis.org -
Majdi S. Abbas -
Thomas P. Brisco