Stanley, Stanley Hopcroft wrote:
>Dear Ladies and Gentlemen, > >I have the wonderful Ntop product, some Cisco 4xxx series (high end) and >would like to find who is using the WAN link, for what and how much. > >All the remote clients access applications (except file serving) at the >central site. That said the mean throughput is very low; Internet access >and Lotus Notes replication probably use most capcity. > > >Remote Central > >| >| Cisco 4xxx Cisco 4xxx | >|- X ------ low speed (less than T1) Frame relay PVC - x-| >| | >|- Ntop equipped host >|- Ms Win boxes using WAN for Internet access, Oracle etc >| > >At the moment I am using ntop with a filter (to get all off LAN >traffic), but would having Cisco Netflow on the remote routers feeding >to Ntop be better ? > >I have one specific requirement, namely I want to do per packet load >balancing on another parallel link (for threshold based extra capacity) >so I have 'no ip-route cache' configured on the WAN interfaces of the >4000s ? > >Will Netflow switching still allow per packet routing - yes it is an off >topic question, but those reading this list are liekly to know. > >Also will Netflow switching cause instability in the routers ? > > I can answer about this. In my experience even with high-end routers (the 12K series with a separate card for NetFlow) you cannot capture traffic too fast. Namely 30-40 Mbit is already a lot of traffic for a netflow probe. Hence, if your LAN doesn't have much traffic, NF is fine. More traffic could be a problem. Off the track, I plan to release soon (hopefully in a matter of days) a new software named nProbe (http://www.ntop.org/nProbe.html) that is a NetFlowV5 probe I have developer for a customer in the past months. The nice thing about nProbe is that it is very small (< 100 Kb), takes up little memory (< 2 MB RAM regardless of the network size and number of hosts), it is fast (it can handle >> 30 Mbit) and it has been designed to be embedded on a PC with little resources. Of course, both nProbe and ntop have been designed to work together. Regards, Luca >Thank you, > >Yours sincerely. > > > -- Luca Deri NETikos S.p.A. Via Matteucci 34/B 56124 Pisa, Italy. Ph. +39/050/968.639 Fax. +39/050/968.626 Personal: [EMAIL PROTECTED] Business: [EMAIL PROTECTED] WWW: http://luca.ntop.org/ ICQ: 68183632 Hacker: someone who loves to program and enjoys being clever about it - Richard Stallman _______________________________________________ Ntop-dev mailing list [EMAIL PROTECTED] http://lists.ntop.org/mailman/listinfo/ntop-dev
