On 09/28/06 12:50, Brian Loe published:
On 9/28/06, Gary Gatten <[EMAIL PROTECTED]> wrote:
Netflow works pretty good for me. If you have core routers you can
enable it there - don't have to enable it on every remote. If you
choose to however, it will work. the netflow streams are routable so
the flow receiver(s) can be anywhere. You won't get as much detail as
you would capturing real packets, but fi you don't need that detail it's
far easier to configure all around - and WAY fewer resources.
So if you want a lot of detail, do you plug it into a switch on the
same network as the router and configure the router to send to it - or
do you configure a SPAN port for the router's inside interface?
That, or you could plug it into a hub (probably with a Rx-only Ethernet
cable) to capture all traffic going to and from one interface.
--
Richard Kolkovich
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop