Configure netflow on a cat6k

Hi all,

I configured netflow on a cat6k with ntop as a datacollector. As the source I cfg a vlan interface

================== cat 6500

interface Vlanxxx ! ip flow-export ingress ip route-cache flow ! ip address x.x.x.x 255.255.255.192 no ip redirects no ip proxy-arp end

ip flow-export source vlan xxx ip flow-export destination x.x.x.x 2055 ==================================

right now i should collect _all_ traffic on the backplane is this possible with ntop or should I use for MRTG ...maybe any other freeware tool ??

thanks

udo

Reply to
udo
Loading thread data ...

Ntop will provide what you are looking for, not to sure what platform you are running on, but the service is very unstable on a Windows platform.

Also with the config for ingress only, just be aware that the traffic analysis will only show one way traffic to.

What version of code are you running on your 6000.

Damian

udo wrote:

Reply to
Damian

Hi Damian,

traffic which I want..;.-) First I try to messure only the traffic on this VLAN which is connected to the internet firewall. then I also saw only the vlan traffic where the linux system (ntop collector) is located.?!?!?! did you have any experience in configuring ntop ?!?!

udo

Reply to
udo

Here is my favorite open source netflow tools:

nfsen

formatting link
I like Ntop, but I cannot get it to run very long without it using all the memory on my server.

Tristan Rhodes

udo wrote:

Reply to
tristan.rhodes

hi tristan,

this tool seems to be very interesting...i will test ist. is it right that ntop consumes a lot of memory on the running system...

thanks

udo snipped-for-privacy@gmail.com schrieb:

Reply to
udo

Hi

it takes a lot of cpu also here is example from the system with ntop running (It's a 4 xeon (3GHz) box)

last pid: 20507; load averages: 6.11, 6.11, 6.09 up 133+04:57:40 01:01:52

74 processes: 8 running, 66 sleeping CPU states: 55.8% user, 0.0% nice, 44.0% system, 0.2% interrupt, 0.0% idle Mem: 297M Active, 3004M Inact, 233M Wired, 110M Cache, 112M Buf, 120M Free Swap: 2048M Total, 2048M Free

PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU CPU COMMAND 474 nobody 130 0 174M 163M RUN 0 3253.3 98.73% 98.73% ntop

80653 nobody 130 0 91120K 79300K CPU3 0 2639.5 74.12% 74.12% ntop 94759 nobody 130 0 75344K 63556K RUN 0 2807.8 73.05% 73.05% ntop 94766 nobody 130 0 75344K 63556K RUN 0 2809.1 72.85% 72.85% ntop 21000 nobody 130 0 174M 163M CPU1 1 791.9H 72.75% 72.75% ntop 478 nobody 4 0 1520K 1000K accept 0 48:48 0.00% 0.00% tac_plus

just my 2c

Roman Nakhmans> hi tristan,

Reply to
Roman Nakhmanson

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.