Re: Netflow

The netflow only works for the layer 3 and above. Most people use it for capacity planning, monitoring. It has the great advantage than transitional SNMP based in terms of what how when, who, etc. Packet capture can be used for deeper packet inspection. Check the product "netflow tracker" from below website. www.visualnetworksystems.com

Hope this helps.

Best regards,
Bai Qing
CCIE2#19146 (RS, SP)
------------------------------
Sent from my iPhone

TZ 2011-2-21#,OBNg09:12#,"eseosa" <eseosa.ehiwe_at_gmail.com> P45@#:

> netflow ( ip accounting) only looks at header info (l3 and l4 header)
> wireshark( protocol analyser) looks at payload and header information
> and layers above layer 4
>
> hth
>
>
>
> On 2/20/11, imran ali <immrccie_at_gmail.com> wrote:
>> netflow : Accounting on steriods
>>
>> not a capturing software but ios feature.
>>
>> On Sun, Feb 20, 2011 at 4:00 PM, Shaughn Smith <maniac.smg_at_gmail.com> wrote:
>>
>>> I think you need to do some more research before posting a question like
>>> this
>>>
>>>
>>> CCIE # 23962 (SP)
>>>
>>> Sent from my iPhone 4
>>>
>>> On 20 Feb 2011, at 12:25 PM, Irfan Sid <lifeoverip_at_gmail.com> wrote:
>>>
>>>> Has anyone configured Netflow on their network? Is it like a packet
>>> capture,
>>>> whats the difference between a packet capture on wireshark and Netflow..
>>>>
>>>> Also whats a good freeware for capturing netflow stats?
>>>>
>>>> Thanks
>>>>
>>>>
>>>> Blogs and organic groups at http://www.ccie.net
>>>>
>>>> _______________________________________________________________________
>>>> Subscription information may be found at:
>>>> http://www.groupstudy.com/list/CCIELab.html
>>>
>>>
>>> Blogs and organic groups at http://www.ccie.net
>>>
>>> _______________________________________________________________________
>>> Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>>
>>
>>
>>
>>
>>
>>
>
>
> --
> Warm Regards,
>
> Eseosa
> CCIE #23782
> You can learn anything just develop the right quantity of interest.
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Mon Feb 21 2011 - 18:02:42 ART