[Flow-tools] Beginner on netflow/flowtools

[Lars Lystrup Christensen]

Hi there   I’ve got a setup based on 2 Cisco 7204VXR routers and 4 BGP-peerings. The setup is like the following:   +--------+� +--------+ ���+--------+� +--------+ | Peer A |� | Peer B | ���| Peer C |� | Peer D | +--------+� +--------+ ���+--------+� +--------+ ���� |��������� |����� ��������|���������� | �� +---------------+�� ������+---------------+ �� | ��Switch A ���|�� ������| ��Switch B�� �| �� +---------------+�� ������+---------------+ � Gi0/1 |� ��Gi0/12 \� �����/ Gi0/12� | Gi0/1 ������� |����������� �\�� / ����������| ������� |������������ ��X������������ | ������� |������������ /�� \���������� | � Gi0/1 |���� Gi0/2 /������ \ Gi0/2�� | Gi0/1 �� +---------------+������� �+---------------+ �� | ���Router A ��| ��������| ���Router B� �| �� +---------------+������� �+---------------+ ������� |�������������������������� ��| +-----------------------------------------------+ ����������� LAN (ATM-based network)   The 2 switches (Catalyst 3550) are only working in pure Layer 2 mode (no routing). Router A has peerings with Peer A and Peer B, and Router B peers with Peer C and D. On the routers, all peerings are terminated on subinterfaces using VLANs (one VLAN per Peering). The 2 routers are connected like this: [Ra]Gi0/1 -> [Sa]Gi0/1 -> [Sa]Gi0/12 -> [Rb]Gi0/2 [Ra]Gi0/2 -> [Sb]Gi0/12 -> [Sb]Gi0/1 -> [Rb]Gi0/1   At the moment I’ve enabled ” ip route-cache flow” on the main interfaces (Gi0/1 and Gi0/2) on both routers. Both routers export the flows to a flow collector, connected to a port on switch B.     My questions are:   Is it correct to enable the flow only on the main interface or should I rather enable it on each sub-interface? Could you point me to some basic reports, which provides me with: Traffic flow (flows, bits/bytes, average bps, max bps) to each peering Traffic flow (flows, bits/bytes, average bps, max bps) to each subnet on our network (actually it’s for each customer connected to our network)   Maybe also some more in-depth guides for using flow-tools to make analysis.     ______________________________________ Med venlig hilsen / Kind regards Lars Lystrup Christensen IP Operations Technician Danske Telecom A/S Lautrupsgade 9, 2 2100 K�benhavn � [EMAIL PROTECTED] +45 35 27 50 00 (Office) +45 35 27 50 50 (Fax) +45 35 27 50 23 (Direct) +45 40 60 55 23 (Mobile) www.dansketelecom.com  This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation.

_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools