Cisco traffic/utilization statistics - recommendations

A customer is looking for a way to analyze bandwidth utilization on Cisco router interfaces - specifically, how much (and what percentage) of BW is being used by:

- applications - HTTP(S), P2P, etc.
- L3 - which particular sources and/or destinations are consuming the most BW
- etc.

I know the Cisco interface commands (which only provide traffic volume over different periods of time.

Will Netflow provide this, or is a 3rd-party application required?  We need to provide a recommendation to the customer that they can use to pull this information on-demand, and that's relatively easy-to-use and cost-effective (if not built-in/free).

Thanks, and reference docs/links are always appreciated.


cfan73Asked:
Who is Participating?
 
joelvpConnect With a Mentor Commented:
Netflow looks like the way to go for your customer. Solarwinds has a good solution for netflow. The have a free version with limitations. See http://www.solarwinds.com/products/freetools/netflow_analyzer.aspx
Also there is http://www.manageengine.com/products/netflow/ 
Be aware that, although a lot, not all cisco platforms support netflow, specifically there are some sommonly catalyst switches which do not support it. You can check this with the cisco feature navigator at http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp
0
 
WissamConnect With a Mentor Senior Network EngineerCommented:
ip nbar is a good idea, it is a simple tool that can be enabled per interface
To enable nbar for fast 0/0 interface

(config)#interface FastEthernet0/0
(config-if)#ip nbar protocol-discovery

Once NBAR is gathering data, you can use the 'show ip nbar resources' command to see how much memory it’s taking up. As long as the numbers are acceptable, you can leave NBAR protocol discovery running as long as you like. To see the really interesting information, issue 'show ip nbar protocol-discover' and look at all the protocols flowing to (and perhaps through) your router. In the screenshot to the right, you can see that I’ve limited the output by using the 'top-n' variant of the above command.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.