On 9/28/06, Gary Gatten <[EMAIL PROTECTED]> wrote:
The most detail will always come from seeing the real packets, so a SPAN
port will always yield the most detail. Yes, SPAN the router(s)
interface and you'll see everything the router sees. Also check into
RSPAN so you won't need an "analyzer" - nTop / whatever everywhere. If
your LAN has plenty of bandwidth available and you're monitoring WAN
links, RSPAN is the way to go.
While SPAN will give the MOST detail, most often netflow is more than
adequate. Again, depends on what you're wanting to do. I mainly want
to see who is using all my bandwidth and what application they're using
- and netflow does that well.
Gary
Okay, I follow. So, what about seeing what the switch(es) is doing,
any thoughts on that?
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
