Help needed - Cisco Netflow
Hi all, I have a customer who has a MPLS network for E/// Media Gateway (MGW) NB-AMR VoIP traffic. The packet size for the NB-AMR traffic is fixed size 110 bytes. During the high load period, it can reaches 450Kpps on a STM-1 link. The router platform is Cisco 12000 series, can the router generate 100% netflow data with such traffic load? Also can someone suggest a carrier class netflow collector for mobile service provider environment. Thanks in advance. Regards, Steven Lee
Lee, The question would be do you want a self contained appliance or a piece of software? I have used Advent Network's Net Flow Analyzer. There are others out there but I've had some decent amount of luck with these guys and they have an "Enterprise" license that will many, many (thousands?) interfaces. For the traffic load and the number of flows/second I'm guessing you'll need a really high end Linux box with lots and lots of disk space. There are open source netflow collectors too you could deal with if cost is an issue or you have the talent on staff to maintain it. Chuck -----Original Message----- From: Lee, Steven (NSG Malaysia) [mailto:kin-wei.lee@hp.com] Sent: Friday, October 10, 2008 12:17 PM To: nanog@nanog.org Subject: Help needed - Cisco Netflow Hi all, I have a customer who has a MPLS network for E/// Media Gateway (MGW) NB-AMR VoIP traffic. The packet size for the NB-AMR traffic is fixed size 110 bytes. During the high load period, it can reaches 450Kpps on a STM-1 link. The router platform is Cisco 12000 series, can the router generate 100% netflow data with such traffic load? Also can someone suggest a carrier class netflow collector for mobile service provider environment. Thanks in advance. Regards, Steven Lee This e-mail message and any files transmitted with it contain confidential information intended only for the person(s) to whom this email message is addressed. If you have received this e-mail message in error, please notify the sender immediately by telephone or e-mail and destroy the original message without making a copy. Thank you. Neither this information block, the typed name of the sender, nor anything else in this message is intended to constitute an electronic signature unless a specific statement to the contrary is included in this message.
Open source netlow collector NTOP: http://www.ntop.org -----Original Message----- From: Mills, Charles [mailto:cmills@accessdc.com] Sent: Friday, October 10, 2008 12:46 PM To: Lee, Steven (NSG Malaysia); nanog@nanog.org Subject: RE: Help needed - Cisco Netflow Lee, The question would be do you want a self contained appliance or a piece of software? I have used Advent Network's Net Flow Analyzer. There are others out there but I've had some decent amount of luck with these guys and they have an "Enterprise" license that will many, many (thousands?) interfaces. For the traffic load and the number of flows/second I'm guessing you'll need a really high end Linux box with lots and lots of disk space. There are open source netflow collectors too you could deal with if cost is an issue or you have the talent on staff to maintain it. Chuck -----Original Message----- From: Lee, Steven (NSG Malaysia) [mailto:kin-wei.lee@hp.com] Sent: Friday, October 10, 2008 12:17 PM To: nanog@nanog.org Subject: Help needed - Cisco Netflow Hi all, I have a customer who has a MPLS network for E/// Media Gateway (MGW) NB-AMR VoIP traffic. The packet size for the NB-AMR traffic is fixed size 110 bytes. During the high load period, it can reaches 450Kpps on a STM-1 link. The router platform is Cisco 12000 series, can the router generate 100% netflow data with such traffic load? Also can someone suggest a carrier class netflow collector for mobile service provider environment. Thanks in advance. Regards, Steven Lee This e-mail message and any files transmitted with it contain confidential information intended only for the person(s) to whom this email message is addressed. If you have received this e-mail message in error, please notify the sender immediately by telephone or e-mail and destroy the original message without making a copy. Thank you. Neither this information block, the typed name of the sender, nor anything else in this message is intended to constitute an electronic signature unless a specific statement to the contrary is included in this message.
On Fri, 10 Oct 2008, Lee, Steven (NSG Malaysia) wrote:
Hi all, I have a customer who has a MPLS network for E/// Media Gateway (MGW) NB-AMR VoIP traffic. The packet size for the NB-AMR traffic is fixed size 110 bytes. During the high load period, it can reaches 450Kpps on a STM-1 link. The router platform is Cisco 12000 series, can the router generate 100% netflow data with such traffic load? Also can someone suggest a carrier class netflow collector for mobile service provider environment.
Forget full netflow with 12000. It is not supported.... Janos Mohacsi Network Engineer, Research Associate, Head of Network Planning and Projects NIIF/HUNGARNET, HUNGARY Key 70EF9882: DEC2 C685 1ED4 C95A 145F 4300 6F64 7B00 70EF 9882
Thanks in advance.
Regards, Steven Lee
participants (4)
-
Kocher, Keith
-
Lee, Steven (NSG Malaysia)
-
Mills, Charles
-
Mohacsi Janos