Re: Which is best tool to audit specif network traffic flows ?

From: Tom Kacprzynski <tom.kac_at_gmail.com>
Date: Fri, 28 Jun 2013 21:48:57 -0500

We use Scrutinizer they do nice reporting and queries. You can search for
individual IP, ASN..etc.. If you are interested in the QoS aspects and
troubleshooting those types of issues I recently saw LiveAction (
http://www.actionpacked.com/products/overview) which was pretty cool

Tom Kacprzynski
CCIE#36159

On Thu, Jun 20, 2013 at 2:01 PM, Imran Ali <immrccie_at_gmail.com> wrote:

> from cisco FNF technology Q n A
> Q What are the key advantages of Flexible NetFlow above traditional
> NetFlow?
> *A.*
>
> Flexibility, scalability, aggregation of flow data beyond today's
> NetFlow.
>
> The ability to monitor a wider range of IP packet information from layer
> 2 to 7
>
> Enhanced network anomaly and security detection
>
> User configurable flow information to perform customized traffic
> identification and the ability to focus and monitor specific network
> behavior
> Convergence of multiple accounting technologies into one accounting
> mechanism
>
>
>
> On Thu, Jun 20, 2013 at 8:58 PM, Carlos G Mendioroz <tron_at_huapi.ba.ar
> >wrote:
>
> > Why would that be ?
> >
> > Imran Ali @ 20/06/2013 11:20 -0300 dixit:
> > > flexible netflow should be used .instead of regular netflwo
> > >
> > > On Thu, Jun 20, 2013 at 3:42 PM, Joe Sanchez <marco207p_at_gmail.com>
> > wrote:
> > >
> > >> I used scrutinizer in the past, as a netflow collector. It was free
> > for a
> > >> large number of devices and presented a large number of ways to see
> all
> > the
> > >> traffic flows.
> > >>
> > >> Regards,
> > >> Joe Sanchez
> > >>
> > >> ( please excuse the brevity of this email as it was sent via a mobile
> > >> device. Please excuse misspelled words or sentence structure.)
> > >>
> > >> On Jun 20, 2013, at 7:32 AM, Tony Singh <mothafungla_at_gmail.com>
> wrote:
> > >>
> > >>> First question I'd ask is it a problem If your users are not showing
> in
> > >> the top 50, but again that's at the point that you check and it's on
> the
> > >> fly...
> > >>>
> > >>> I would be looking at my wan exists, sub int to see tx rx utilisation
> > >> from any of the mentioned apps then run netflow top talkers at the
> peak
> > >> times to target host ip addresses
> > >>>
> > >>> --
> > >>> BR
> > >>>
> > >>> Tony
> > >>>
> > >>> Sent from my iPad
> > >>>
> > >>> On 20 Jun 2013, at 07:54, rizi <riziriz_at_gmail.com> wrote:
> > >>>
> > >>>> Dear Friends,
> > >>>> Being network engineer many times i want to know what kind of
> traffic
> > /
> > >> how
> > >>>> much traffic any specific user or computer is generating onto my
> > >> network.
> > >>>>
> > >>>> I have been using Solarwinds Orion Netflow Traffic Analyzer .. But
> it
> > >> shows
> > >>>> only top -n flows. The problem , the computers which i want to
> observe
> > >> do
> > >>>> not make too much traffic so it does not come in top 50 category.
> > >>>>
> > >>>> I also tried .. live Netflow traffic Analyzer .. same problem.. ie
> is
> > no
> > >>>> option there to get traffic analyses of node if that is generating
> > very
> > >>>> less traffic..
> > >>>>
> > >>>>
> > >>>> Question is .... which tool you guys use or think is best that will
> > >> give me
> > >>>> power to see traffic of any node that is passing through my network.
> > >>>>
> > >>>>
> > >>>> regards,
> > >>>> Rizwan
> > >>>>
> > >>>>
> > >>>> Blogs and organic groups at http://www.ccie.net
> > >>>>
> > >>>>
> > _______________________________________________________________________
> > >>>> Subscription information may be found at:
> > >>>> http://www.groupstudy.com/list/CCIELab.html
> > >>>
> > >>>
> > >>> Blogs and organic groups at http://www.ccie.net
> > >>>
> > >>>
> _______________________________________________________________________
> > >>> Subscription information may be found at:
> > >>> http://www.groupstudy.com/list/CCIELab.html
> > >>
> > >>
> > >> Blogs and organic groups at http://www.ccie.net
> > >>
> > >>
> _______________________________________________________________________
> > >> Subscription information may be found at:
> > >> http://www.groupstudy.com/list/CCIELab.html
> > >
> > >
> > > Blogs and organic groups at http://www.ccie.net
> > >
> > > _______________________________________________________________________
> > > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> >
> > --
> > Carlos G Mendioroz <tron_at_huapi.ba.ar> LW7 EQI Argentina
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Fri Jun 28 2013 - 21:48:57 ART

This archive was generated by hypermail 2.2.0 : Mon Jul 01 2013 - 06:58:42 ART