Carl Burkland November 19, 2008 - Pacug.com

Recommendations

Info

Versions 5 & 9Version 5• Gateway Protocol (BGP) autonomous system information• Flow sequence numbersVersion 9• Layer 2 information, new security detection information, IPv6, Multicast,MPLS• Almost any information can be exported from a router or switch• 3 rd party applications – no need to redevelop applications with changingtechnology• Modularity - New features can be added to NetFlow more quickly, withoutbreaking current implementations.• V9 is capable of handling requirements for future implementations
Netflow Components• Exporter – sends flow data to Collector in UDP / SCTP packets• Cisco Routers• Limited Catalyst switch support• Cisco ASA 5580 – security events• Collector – receives and stores Netflow records for review / action• Cisco NetFlow Collector (NFC)• Plixer Scrutinizer (demo tonight)• Managewise NetFlow Analyzer• Solarwinds NetFlow Traffic Analyzer (demo tonight)• NetQoS ReporterAnalyzer• NTOP (GNU) – NMON (Commercial)
Page 1 and 2: Pittsburgh Area Cisco Users Group (
Page 3 and 4: MRTG Graph with and without NBAR
Page 5: Netflow Facts• Netflow - Develope
Page 9 and 10: What Defines a Flow?• Source IP a
Page 11: Solarwinds Real-time Netflow Analyz
Page 14 and 15: How can I limit resource impact?•
Page 16 and 17: Wait! - What do I do if my devicedo
Page 18: Useful Links• Cisco Netflow Main

Carl Burkland November 19, 2008 - Pacug.com

Create successful ePaper yourself

Delete template?

Save as template?