From: Felix Nkansah (felixnkansah@gmail.com)
Date: Sat Jan 31 2009 - 17:05:45 ARST
Hi Truman,
The suggested solution appears smart. Never thought of such a combination of
SPAN and Netflow in action !
As I haven't tested this before, I can only express my doubts about it
providing the desired effect.
In my experience, netflow basically provides detailed traffic information
for traffic that 'flows' through a router.
In the suggested scenario, the mirrored packets would not actually be
flowing through the router but intended to be forwarded to it instead.
My guess is that the router would actually drop all such mirrored packets
(unless its in bridging mode).
I stand for correction here, but I doubt this would work as it is intended
to.
My recommendation is to connect a PC to the mirrored port instead. Software
like Iris or wireshark running on the PC can generate netflow-like reports
based on the mirrored packets received.
My 2 cents!
Felix
On Sat, Jan 31, 2009 at 5:45 PM, Truman Ford <truman.ccie@gmail.com> wrote:
> > Hi Gentleman,
> >
> > My customer needs to configure Netflow in the cisco 3750, however it
> dosent
> > support Netflow. However, My customer wants to add a extra 2800 router,
> and
> > do the port mirroring in cat 3750 pointing to the port where this router
> is
> > connected, and configure the Netflow in the router.
> > My customer is adding the extra router only for using netflow and hence
> to
> > minimize any down time.
> >
> > Note: 3750 switch is the core switch. Netflow agent is non cisco in the
> > server.
> >
> > 1) Please let me know whether this solutions works or not and if it works
> > then how we can achevieve?
> > 2) If it dosent work then is there any alternative?
> >
> > --
> > warm regards, Truman
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >>
> >> _______________________________________________________________________
> >> Subscription information may be found at:
> >> http://www.groupstudy.com/list/CCIELab.html
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >
>
>
> --
> warm regards, Truman
>
>
>
> --
> warm regards, Truman
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Sun Mar 01 2009 - 09:43:41 ARST