Does anyone have experience setting up Cisco Netflow cards to capture data flow to export to an external workstation?
I need help understanding what's the best cache settings/overall config to ensure least amount of bandwidth used exporting from netflow card to external workstation.
I also don't want to add a ton of extra utilization on my switches.
I've got a redundant Catalyst 4507R, WS-X4515 Supervisor Engine's both with Netflow cards installed.
Basically right now I've only got the cards installed.
The Cisco guides aren't clear if the cache settings are important for exporting the data to a external workstation for analyzing, or what best practices/recommended settings to use.
The configuration doesn't look to complicated I just want to make sure I don't add a ton of extra load on the switch while capturing data or while exporting it.
If anyone has implemented Netflow and has some best practices/recommended settings that you can share I'd greatly appreciate it.
Cache settings are important if you are interested in attack mitigation activities for real-time traffic analysis. Netflow Caching allows for real time analysis of collected flows directly on the 4500.
Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg).
If you're interested in additional methods for monitoring bandwidt…