Carl Burkland November 19, 2008 - Pacug.com

Recommendations

Info

Why Netflow?• Find out• WHO?• Source / Destination IP address of traffic flow• WHAT?• Source / Destination Protocol of traffic flow• WHEN?• Timestamp
Netflow Facts• Netflow – Developed by CiscoVersionv1v5v6v7v8v9IPFIXDescriptionFirst tryMost used versionAdded Encapsulation information - not supported by CiscoAdded Catalyst Switch informationAdded router-based Netflow aggregationTemplate Based, allowing many <strong>com</strong>binationsv10; IETF Standardized NetFlow 9 w/ Enterprise fields• IETF Standard being developed – based on Cisco Netflow v9 (very soon!)• Internet Protocol Flow Information eXport (IPFIX)• Other vendor implementations• Juniper Networks - Jflow or cflowd• Huawei Technology - NetStream• Alcatel-Lucent - cflowd
Page 1 and 2: Pittsburgh Area Cisco Users Group (
Page 3: MRTG Graph with and without NBAR
Page 7 and 8: Netflow Components• Exporter - se
Page 9 and 10: What Defines a Flow?• Source IP a
Page 11: Solarwinds Real-time Netflow Analyz
Page 14 and 15: How can I limit resource impact?•
Page 16 and 17: Wait! - What do I do if my devicedo
Page 18: Useful Links• Cisco Netflow Main

Carl Burkland November 19, 2008 - Pacug.com

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?