Cisco Netflow: not supported on my device

I am fairly new to Cisco and was wanting to use Netflow on our network to diagnose network issues.

We currently have Cisco Catalyst 2960 switches, which do not support Netflow.

If we purchase one Cisco switch that does support Netflow, will we then be able to track network traffic across all of our switches? or do all of our switches need to support Netflow?
AVIVOLAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

InfamusCommented:
What information do you want out of netflow?

Wan traffic or LAN traffic? or All of them?

How is your network setup?  Are access switches connected to the core switches?
0
AVIVOLAuthor Commented:
What information do you want out of netflow?

We are experiencing an issue currently where someone/something is causing the link between two office to use its maximum bandwidth, we would like to find the cause of this traffic. We'd like to trace traffic volume (or top n traffic volume) back to specific users/ports out on the floor/rack.

Also we would like to get a better understanding of what general traffic is on our network. (where it is coming from, where it is going, what type of traffic it is etc.)

Wan traffic or LAN traffic? or All of them?

Both.

How is your network setup?  Are access switches connected to the core switches?

Yes, all access switches are connected to the core switches.
Core switches are: Cisco 2960s
Access switches are: Cisco 2960
0
unfragmentedCommented:
I'd say a much cheaper way to do this as a one-off is with a span port (supported on the 2960) on the switch connected to a decent PC running wireshark or similar.  If you really want "netflow" then you can probably buy a software netflow probe to put on the PC, that will export "netflow" data for your netflow collector to work with.

Otherwise you will be spending $$$ on netflow capable switches (in the Cisco camp, think 3850 or 3750X with NF module as a minimum).

To answer your question, one netflow switch as one of your cores would do the job, as that will intercept all traffic between offices.  Netflow will show you source and destination IP which you can trace to a port, even if the port is on an access switch.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
InfamusCommented:
You can purchase a layer 3 switch that supports the netflow and monitor the interface which connects to another site. Then you can use netflow software to see the traffic.

You can also span the interface and use wireshard as unfragmented mentioned.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Switches / Hubs

From novice to tech pro — start learning today.