From: Carlos G Mendioroz (tron@huapi.ba.ar)
Date: Tue May 25 2004 - 14:33:21 GMT-3
Sure you can do.
NBAR has a full MIB and MRTG can graph ANY MIB variable.
Also, you can use CBWFQ with NBAR configuration and graph offered versus
accepted traffic.
Also, there's another way of tackling the issue using netflow info. You
make the router export netflow information to a netflow server, and then
generate info from that. Dave Plonka's flowscan tool and some plugins
for it make a nice work in that arena.
Clay Maney wrote:
> I did a quick google search and came across an example of someone
> using MRTG to graph NBAR information.
>
> I haven't tried it, but it looks comprehensive:
>
> http://www.vermeer.org/display_doc.php?doc_id=6
>
> Clay
>
> On Tue, May 25, 2004 at 08:51:37AM -0700, Anthony Pace wrote:
>
>>NBAR will break down the traffic on the router with respect to
>>application (it even goes beyond the port and into the content) but I
>>can't find a tool to create a graphical representation. You have to look
>>at the counters. Does anyone know a way around this?
>>
>>Solarwinds is a very easy-to-use and comprehensive monitoring tool. It is
>>a suite of tools for bandwidth, CPU, uptime, etc...
>>
>>
>>Anthony Pace CCIE 10349
>>
>>
>>
>>On Tue, 25 May 2004 11:43:33 -0400, "Kenneth Wygand"
>><KWygand@customonline.com> said:
>>
>>>I've used PRTG in the past and it works great! However, it only shows
>>>you circuit utilization. Suppose I wanted to see not only _HOW MUCH_
>>>traffic is going over the circuit, but _WHAT_ is going over the circuit.
>>>It would be nice to filter this information based on source IP address,
>>>etc. but sometimes this level of detail is not necessary. Suppose,
>>>however, that I wanted to see if all of the traffic on an OC3 circuit
>>>was FTP or Internet Radio? I believe Netflow switching is a component of
>>>doing the trick, but can you gather basic information simply from CLI
>>>commands? Can you dump log files to a syslog server? Or do you need an
>>>actual management suite application, such as Ciscoworks with the WAN/QoS
>>>functionality?
>>>
>>>Does anyone have any recommendations?
>>>
>>>Kenneth E. Wygand
>>>Systems Engineer, Project Services
>>>CISSP #37102, CCNP, CCDP, ACSP, Cisco IPT Design Specialist, MCP, CNA,
>>>Network+, A+
>>>Custom Computer Specialists, Inc.
>>>"The only unattainable goal is the one not attempted."
>>>-Anonymous
>>>
>>>-----Original Message-----
>>>From: Clay Maney [mailto:clay@pronettech.com]
>>>Sent: Tuesday, May 25, 2004 11:29 AM
>>>To: Kenneth Wygand
>>>Cc: Sam Joseph; ccielab@groupstudy.com
>>>Subject: Re: WAN Monitoring tool
>>>
>>>I responded directly and forgot to respond to the group with this:
>>>
>>>On top of the MRTG/PRTG type tools, there's also one that I sometimes
>>>use for immediate (non-historical) snmp bandwidth graphing called STG.
>>>The only downside is that it only runs on Windows. It is *very*
>>>straightforward if you need some quick info and polls the interface
>>>once per second by default.
>>>
>>>You can get it here: http://leonidvm.chat.ru/
>>>
>>>Clay
>>>
>>>On Tue, May 25, 2004 at 10:22:11AM -0400, Kenneth Wygand wrote:
>>>
>>>>MRTG (Unix) or PRTG (x86 Windows Variant)
>>>>
>>>>PRTG:
>>>>http://www.paessler.com
>>>>
>>>>Kenneth E. Wygand
>>>>Systems Engineer, Project Services
>>>>CISSP #37102, CCNP, CCDP, ACSP, Cisco IPT Design Specialist, MCP, CNA,
>>>>Network+, A+
>>>>Custom Computer Specialists, Inc.
>>>>"The only unattainable goal is the one not attempted."
>>>>-Anonymous
>>>>
>>>>-----Original Message-----
>>>>From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
>>>
>>>Of
>>>
>>>>Sam Joseph
>>>>Sent: Monday, May 24, 2004 11:06 PM
>>>>To: ccielab@groupstudy.com
>>>>Subject: WAN Monitoring tool
>>>>
>>>>Dear Group,
>>>>
>>>>What are best methods of monitoring the frame-relay between two sites
>>>>other
>>>>than beleiving what my ISP says?. I feel the circuit is nearing
>>>>saturation.
>>>>I did some ping tests when i get complaints from users, the ping time
>>>
>>>is
>>>
>>>>terrible. The ping time is anywhere between 1000 msec .... to time
>>>>outs.Looked at the Interface Queue on the router (3810) and that
>>>>doesn't
>>>>look better either.
>>>>
>>>>I would like to monitor this circuit with a better tool?. Any
>>>
>>>ideas????
>>>
>>>>Thanks in Advance,
>>>>
>>>>---Sam.
>>>>
>>>>_________________________________________________________________
>>>>FREE pop-up blocking with the new MSN Toolbar get it now!
>>>>http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/
>>>>
>>>>
>>>
>>>_______________________________________________________________________
>>>
>>>>Please help support GroupStudy by purchasing your study materials
>>>
>>>from:
>>>
>>>>http://shop.groupstudy.com
>>>>
>>>>Subscription information may be found at:
>>>>http://www.groupstudy.com/list/CCIELab.html
>>>>
>>>>
>>>
>>>_______________________________________________________________________
>>>
>>>>Please help support GroupStudy by purchasing your study materials
>>>
>>>from:
>>>
>>>>http://shop.groupstudy.com
>>>>
>>>>Subscription information may be found at:
>>>>http://www.groupstudy.com/list/CCIELab.html
>>>
>>>_______________________________________________________________________
>>>Please help support GroupStudy by purchasing your study materials from:
>>>http://shop.groupstudy.com
>>>
>>>Subscription information may be found at:
>>>http://www.groupstudy.com/list/CCIELab.html
>>
>>--
>> Anthony Pace
>> anthonypace@fastmail.fm
>>
>>--
>>http://www.fastmail.fm - The way an email service should be
>
>
> _______________________________________________________________________
> Please help support GroupStudy by purchasing your study materials from:
> http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
-- Carlos G Mendioroz <tron@huapi.ba.ar> LW7 EQI Argentina
This archive was generated by hypermail 2.1.4 : Wed Jun 02 2004 - 11:12:16 GMT-3