Cisco Systems Is possible Pix + Netflow stadistics?

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Is possible Pix + Netflow stadistics? Sako 03-06-06
Posted by Sako on March 6, 2006, 11:28 am
Please log in for more thread options
Hi there! I've heard about Netflow for Cisco Routers, and I heard
it's quite a good utility to manage a network use.

I want to know if there is any utility that permits making
stadistics of wich ip addresses are using more the network and what
protocols are them using in a device such as cisco PIX 501or 515.

Thanks and regards


Posted by Walter Roberson on March 6, 2006, 12:21 pm
Please log in for more thread options
> Hi there! I've heard about Netflow for Cisco Routers, and I heard
>it's quite a good utility to manage a network use.

> I want to know if there is any utility that permits making
>stadistics of wich ip addresses are using more the network and what
>protocols are them using in a device such as cisco PIX 501or 515.

The PIX 501 is currently restricted to run 6.x software. The
PIX 515 can run 6.x or 7.0 or 7.1 software. The monitoring
available with 7.0 and 7.1 is more advanced than for 6.x, but
I have not examined the differences as yet. I do recall, though,
that there is no equivilent to netflow for PIX 6.x or PIX 7.0.

For PIX 6.x, if you are trying to track by anything finer-grained
than total traffic on the [logical] interface, then your only option
is to set up logging to a syslog server, and to use some program
that analyses the syslog output. The two major limitations on that
are: 1) that it has no way to provide you with information about
current bandwidth usage through syslog (but snmp can give overall
bandwidth usage); and 2) that throughput estimates cannot be made
for connections until the connection closes and the final connection
time and byte-count are written out. The byte counts are not broken
down by direction, unfortunately.


For sample source to do a traffic volume analysis of a PIX 6.x log, see

http://groups.google.ca/group/comp.dcom.sys.cisco/browse_thread/thread/972a527ba458f06/37ddb0b6234c1e48#37ddb0b6234c1e48

Similar ThreadsPosted
Is possible Pix + Netflow stadistics? March 6, 2006, 11:28 am
6500 modules & netflow - what is the difference between "X-BAR" and "Fabric enabled" , netflow questions October 12, 2005, 8:12 pm
Netflow over VPN February 8, 2006, 6:20 pm
Netflow on PIX December 5, 2006, 7:41 pm
"NetFlow" for ASA April 3, 2007, 7:53 am
NetFlow September 11, 2007, 4:07 pm
Re: NTOP & Netflow February 13, 2006, 7:58 am
Netflow easy, MLS not June 21, 2006, 7:54 pm
NETFLOW ON CAT 3550 July 8, 2005, 12:22 pm
Netflow QOS monitoring September 15, 2006, 5:58 am
[gsr] netflow on subinterfaces December 12, 2006, 5:32 pm
Configure Netflow December 4, 2007, 5:32 pm
more netflow problems March 23, 2008, 2:40 pm
NetFlow Collector performance September 27, 2005, 9:42 am
Netflow and VRF-Lite problem November 3, 2005, 8:24 am