Netflow keeps track of all the communication happing and packs them off in udp to destination. by writing a small udp port listener we can start listening the flows and dump them in some db or flat file.
In Nbar we actually enable the top n per interface wise and then poll the data through snmp. again the difference is snmp polling is far less in volumes and netflow data will be huge in quantity. based on requirement any one of the two can be used . like if the interdepartmental billing is the need then u cant afford to miss any single flow so take help of netflow .....if its just knowing the distribution of the Application on any link then NBAR will do . sanjay -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of [EMAIL PROTECTED] Sent: Tuesday, May 25, 2004 1:54 AM To: [EMAIL PROTECTED] Subject: [mrtg] Re: monitoring bandwidth per protocol So, between the two, Netflow & NBAR, whch is better? I suspect there's advantages and disadvantages to each... -Jon Hartman -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Masood Ahmad Shah Sent: Friday, March 26, 2004 12:51 PM To: Zeeshan Ahmed; Victor Souza Menezes; [EMAIL PROTECTED] Subject: [mrtg] Re: monitoring bandwidth per protocol yeah Zeeshan is right you can use ip nbar. if your router did not support ip nbar then run cache flow on required interface and get statistics via netflow or you can write your own expect script to get statistics from router. I'm sure you can find tool or script via search on net that can be use to get cache flow statistics. Rule of thumb if you have data u can generate graph :) Best Regds, Masood Ahmad Shah Nexlinx http://nexlinx.net.pk ----- Original Message ----- From: "Zeeshan Ahmed" <[EMAIL PROTECTED]> To: "Victor Souza Menezes" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Thursday, March 25, 2004 11:21 AM Subject: [mrtg] Re: monitoring bandwidth per protocol > i do it in the way that i have enabled the NBR o my cisco router that > differentiate the traffic per protocol then i get stats throygh mrtg > from NBR. > > Regards > Zeeshan Ahmed > ----- Original Message ----- > From: "Victor Souza Menezes" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Thursday, March 25, 2004 2:31 AM > Subject: [mrtg] monitoring bandwidth per protocol > > > > Hi all, > > > > I'm running mrtg-2.10.13 on a Red Hat 9 system to monitor a router > > of my > network > > and it works fine. > > > > If i want to monitor, for example, the traffic on my network per protocol > , i > > mean, TCP, X11, HTTP, ARP, POP, etc, what should i do??. I want to > configure > > mrtg to monitor my firewall and i have some doubts: > > > > ->Despite having the snmp agent running, do i have to make some > modifications in > > the snmpd.conf file?? > > > > if someone have already done this before, please give me an example > > of > your > > conf file. And if you know too the name of a good mib browser for > > linux, please tell me. > > > > regards victor > > > > -- > > Unsubscribe mailto:[EMAIL PROTECTED] > > Archive http://www.ee.ethz.ch/~slist/mrtg > > FAQ http://faq.mrtg.org Homepage http://www.mrtg.org > > WebAdmin http://www.ee.ethz.ch/~slist/lsg2.cgi > > > > > > -- > Unsubscribe mailto:[EMAIL PROTECTED] > Archive http://www.ee.ethz.ch/~slist/mrtg > FAQ http://faq.mrtg.org Homepage http://www.mrtg.org > WebAdmin http://www.ee.ethz.ch/~slist/lsg2.cgi > -- Unsubscribe mailto:[EMAIL PROTECTED] Archive http://www.ee.ethz.ch/~slist/mrtg FAQ http://faq.mrtg.org Homepage http://www.mrtg.org WebAdmin http://www.ee.ethz.ch/~slist/lsg2.cgi -- Unsubscribe mailto:[EMAIL PROTECTED] Archive http://www.ee.ethz.ch/~slist/mrtg FAQ http://faq.mrtg.org Homepage http://www.mrtg.org WebAdmin http://www.ee.ethz.ch/~slist/lsg2.cgi -- Unsubscribe mailto:[EMAIL PROTECTED] Archive http://www.ee.ethz.ch/~slist/mrtg FAQ http://faq.mrtg.org Homepage http://www.mrtg.org WebAdmin http://www.ee.ethz.ch/~slist/lsg2.cgi
