Solved

Network monitoring - ideas? Theory....

Posted on 2013-12-20
8
977 Views
Last Modified: 2014-01-05
I am trying to setup a monitoring system using various components. What I am looking to gather data on is Syslog, SNMP (bandwidth usage) and NetFlow for about 50 Cisco ASAs. I know I could go with one of the big providers like SolarWinds or Plixer but they are pricy. At this point we really can't afford to drop the cash on a big product just yet, but I'm sure we will once we get some results... Anyway... Here are my thoughts, please let me know where any of this makes sense or give advice as to what best to do.

I've been playing with Ntop, Splunk, Kiwi, Cacti, and NetCrunch. We currently use NetCrunch for server monitoring. I want something more geared toward network monitoring. Since we are trying to save cash out of the gate, I am trying to use open source stuff where possible. Cacti is alright and gets the job done. It's a bit limited but works for now. I use it for bandwidth monitoring only now. What I would like to do is gather all the data in one point and parse it out to applications as necessary. We don't always need to be monitoring a specific node all of the time. Would it make sense to pull all of the SNMP and Syslog data into say.. Kiwi, then forward it along with some rules applied to Cacti for bandwidth... then some of the Syslog data that matches a filter to Splunk? Then there is Netflow. I would love to get this working. A client may want us to monitor a system for a month and give them a report that says in detail what kind of traffic they are using. I know with NetFlow that is a whole lot of data and most of the free licenses will not allow us to use all of it (Splunk with it's 500MB/Day quota).

If you can gather what it is that I'm trying to do, what advice would you give me?

I hope this isn't too scattered but I'm new to this and learning a lot.

Thanks!
0
Comment
Question by:farroar
8 Comments
 
LVL 29

Expert Comment

by:Randy Downs
ID: 39732045
Try Solarwinds. you can get a free trial.

http://www.solarwinds.com/search/how-to-configure-netflow-snmp.aspx

Network Performance Monitor
Powerful fault & performance management software makes it quick and easy to detect, diagnose, and resolve issues. Download a free trial of Orion NPM and start monitoring your network in less than an hour! ...
www.solarwinds.com/products/orion/
0
 
LVL 22

Expert Comment

by:Matt V
ID: 39732574
Have you looked at Zenoss at all?  It combines pretty much everything into one product.

http://community.zenoss.org/index.jspa

Nice thing about Zenoss is you can purchase commercial support if you decide you want it later.
0
 
LVL 25

Expert Comment

by:Fred Marshall
ID: 39732604
PRTG is very good in my opinion.  And, not very costly.
0
 
LVL 1

Expert Comment

by:danieljanderson1234
ID: 39733218
ihij.com may have what you need.

Not sure if it will give you all the reports you are looking for, but I think it can report high bandwidth on devices.
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 
LVL 10

Expert Comment

by:convergint
ID: 39734180
https://www.icinga.org/
http://www.netxms.org/
http://www.opennms.org/
http://www.zabbix.com/product.php

I have only used Zenoss so far and it is not bad but OpenNMS has very good reviews but we have not yet tried it.  All of the above are free open source.
0
 
LVL 25

Assisted Solution

by:Cyclops3590
Cyclops3590 earned 250 total points
ID: 39742039
for flow data, ntop is going to be your best bet unless you shove out tons of cash. Sounds like you want to get bandwidth stats on a per app basis.  The best bet will most likely be via syslog analysis via splunk for that.  but you'll most likely have to have multiple instances as I'm sure you'll have over the amount for the free version.  However if you just want total bandwidth, regardless of client/server/app, then what the rest said should do the job.  Most of them you can do custom scripts as well to grab at the stats you want to put into an RRD.  Cacti is actually quite flexible, but it is confusing at first to get what you want into the graphs.  You may want to look into writing your own delta type script to grab the bandwidth you want and then use cacti to call that script and graph that data.  Otherwise yes, for some of the stuff you're after, it's going to cost for that kind of granularity.
0
 
LVL 25

Accepted Solution

by:
madunix earned 250 total points
ID: 39750724
0
 

Author Closing Comment

by:farroar
ID: 39757445
All very excellent comments posted. I appreciate the help. I am going to continue to dig and learn some more. Currently I am trying to get Splunk to do what I want, not quite there yet but coming along.

Thanks and cheers.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
wireshark 2 computers 8 44
cisco switch POE watt limitation 5 57
Cisco Prime and Maps 3 36
Can't ping New Linux Servers 40 27
This article is in response to a question (http://www.experts-exchange.com/Networking/Network_Management/Network_Analysis/Q_28230497.html) here at Experts Exchange. The Original Poster (OP) requires a utility that will accept a list of IP addresses …
Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now