If there's no netflow, you can SPAN interfaces / MAC's going to "services": routers, servers, uplinks, etc. Depending on your data rates this may not be practical. Simple utilization (throughput, pps, etc.) can be done with SNMP and/or RMON built into the switch. Also check into NBAR - very handy if your IOS supports it.
Gary >>> [EMAIL PROTECTED] 9/28/2006 2:56 PM >>> On 9/28/06, Gary Gatten <[EMAIL PROTECTED]> wrote: > The most detail will always come from seeing the real packets, so a SPAN > port will always yield the most detail. Yes, SPAN the router(s) > interface and you'll see everything the router sees. Also check into > RSPAN so you won't need an "analyzer" - nTop / whatever everywhere. If > your LAN has plenty of bandwidth available and you're monitoring WAN > links, RSPAN is the way to go. > > While SPAN will give the MOST detail, most often netflow is more than > adequate. Again, depends on what you're wanting to do. I mainly want > to see who is using all my bandwidth and what application they're using > - and netflow does that well. > > Gary Okay, I follow. So, what about seeing what the switch(es) is doing, any thoughts on that? _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop =========================================================================== "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
