Solved

Netflow of similar without replacing our routers.

Posted on 2013-10-28
8
260 Views
Last Modified: 2013-10-29
Hello,
Perhaps someone can help me find a device that would suite our needs?  We currently have Cisco 3750 switches at each of our sites that are connected to an MPLS network.  Some of the sites have very low speed links and are often saturated.  We wanted to setup NETFLOW on the ports in question so we can easily see where the traffic is coming from but the Cisco 3750 switches do not support it.  Instead of replacing all our switches, we'd like to see if there is some sort of IN-LINE appliance or solution so that we can keep everything as is and just add something within the path of our router and MPLS.  Thanks.
0
Comment
Question by:sthubert
  • 5
  • 3
8 Comments
 
LVL 20

Expert Comment

by:rauenpc
ID: 39606867
Although this isn't inline, PRTG is an application that does all sorts of network monitoring - Netflow, sFlow, SNMP, WMI, etc. It also has the ability to do packet sniffing and reporting based on the sniff. If you were to setup the WAN-facing port on the 3750 as a span source, and the PRTG server as a destination, you would be able to get detailed reports on that info. Performance and historical data will be based on the speed of the machine you configure this on and the disk space available. I believe you can get a free version that allows up to 10 sensors, so you might be able to accomplish this particular task for free, aside from the machine it runs on.
0
 

Author Comment

by:sthubert
ID: 39607037
Would I simply be able to plug this appliance in the WAN VLAN and capture the data the same way a WireShark would?  Does it provide good reporting and top talkers based on bandwidth?
0
 

Author Comment

by:sthubert
ID: 39607048
Or perhaps I would setup a port mirror and plug the mirrored port into the appliance?


...
conf t
monitor session 1 source interface Gigabit 1/0/x
monitor session 1 destination interface Gigabit 1/0/x
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 20

Expert Comment

by:rauenpc
ID: 39608936
With PRTG, this would be a port mirror. PRTG won't pass traffic through two interfaces, so inline plainly isn't an option. Give it a shot for free, you just need a machine to load it on, and the port mirror to be setup.

http://www.paessler.com/prtg/?source=adwords&campaign=prtg_search_campaign_us&adgroup=prtg_network_monitor&adnum=011&gclid=CL38jYapvLoCFfA7Mgodbw0AsA
0
 

Author Comment

by:sthubert
ID: 39609273
I just installed PRTG but like I mentioned my Cisco Routers do not support NETFLOW so how do I use PRTG to capture network data?

I'm really looking for a software or device that can either use to create NETFLOW's or to capture and analyze network data.
0
 
LVL 20

Accepted Solution

by:
rauenpc earned 500 total points
ID: 39609310
When you install netflow, you have a device called the Probe, which is the server itself. If you go to add a sensor to the probe, you can search for sniffer. One choice will be packet sniffer which will also require you to choose an interface. From there, when viewing the sensor you should be able to see all the types of traffic, as well as the who and where, assuming that your port mirror is setup properly. You will likely need two physical interfaces on the PRTG server to handle this.
0
 

Author Comment

by:sthubert
ID: 39609336
WOW!  Works like a charm!  Thanks very much for your HELP I will easily be able to deploy this today!
0
 

Author Closing Comment

by:sthubert
ID: 39609338
Great solution
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Understanding FTPS File transfer is a common requirement in most Enterprises. While there are numerous ways to get a file from Point A to Point B over a network, perhaps the most common method still in use is FTP – File Transfer Protocol. FTP is …
The article explains the protocols and technology which is involved when two computers on different TCP/IP networks communicate with each other. In the diagram, a router is used to segregate two networks. The networks are 192.168.1.0/24 and 192…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question