Not sure exactly what you mean by "monitor". If util / pps only - then embedded RMON and/or SNMP is the way to go. If you want more detail, check out netflow. I'm not sure if the 2500 series supports netflow - depends on the IOS type I think. Pretty sure the 4000 series supports it, but again - not sure in your IOS.
Could also use SPAN ports. Maybe setup 3 SPAN sessions with 2 - 3 ports each? You'll have to test the load though and see if the CPU keeps up, else maybe SPAN the uplinks on the 2500's - but could get interesting on the NIC's you'll need. Bottom line, if you don't need conversation details on all these links - stick with RMON and SNMP. If you need the details, netflow is "best" if it's an option. Else I'm thinking it would be fairly complex and pricey. Also consider a "probe" that sees all traffic through taps or SPAN ports and then emits netflow streams. I think this group makes sucha beastie - but it's been awhile. Cisco IOS has a LOT of features in it - browse around and see if you find anything. Maybe IP accounting will work for you? Just depends on what you "need" vs. what you want. Define your minimum goals and go from there. Gary >>> [EMAIL PROTECTED] 8/30/2006 6:16 AM >>> Hi everybody, I need to monitor 7 * 1GBps full duplex network links beetwen a Cisco 4000 core switch and 7 Cisco 2500 switches. I'm thinkin about using ntop but I don't what could be the required hardware/configuration because it depends on: - Using netwok taps requires to use 2 NICS per link to capture the fill duplex info. Is ntop able to merge the interfaces information? If not I could use an aggregation tap. - Using ntop directly implies to capture packets at Gigabit speeds. Any experience using SAMPLING. - The third option is to use Taps + sFlow probes (nProbes?) + ntop (but perhaps the costumer will not find affordable the solution). The aggregated traffic is about 3Gbps. Conclusion: I would be glad to know about ntop implementation on high speed networks (performance(%cpu,%mem, packet lose, ...) / hardware). Thank you in advance -- David Morón Ruano _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop =========================================================================== "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
