I need a network monitoring and netflow tool any recommendations?

Hi EE,

I am looking for a new network monitoring tool that will allow me to:
get alerts on server down, space, snmp traps, service down, etc.
I also want to monitor network equipment, bandwidth usage, top talkers, top applications and drill down abilities.

Are there any that you are using that you strongly recommend?  Please share and let me know pros/cons why you like.
operationsITAsked:
Who is Participating?
 
rharland2009Connect With a Mentor Commented:
Best - that's a tough one! I'd say that one of my favorite things about it is the centralization - not only of GUI access, but of alerting/notification/traps. It's easy for me to build highly-specific and customized alerts for not only basic network monitoring (up/down, CPU/memory pressure, drive space, etc.) across platforms, but more sophisticated alerting for application health and performance, service/process monitoring and statistics, and sFlow/Netflow behaviors. In addition, I can build custom views that roll up data from all these different sources into easily-readable pages that show our business stakeholders at a glance how their apps/servers/services are performing.
The new versions of NPM also have grown to include DPI and the ability to use Wireshark-type packet analysis to dive even deeper into network and application performance. It's pretty cool stuff.
There are also modules for IP address management, device/user tracking, router/switch/etc. configuration management, etc.
On the sFlow/Netflow front, as of NTA 4.0 Solarwinds changed how the flow data is stored to increase historical availability information greatly. Now I have granular, non-summarized data going back months without some huge storage requirement.
What am I missing - not much, to be honest. The platform does everything for our business that it was designed to do and more. When I onboarded at my shop 2+ years ago, there was no visibility into what the heck was going on in our infrastructure, on our networks, and through our applications. That has fundamentally changed, and we don't spend time fighting fires. If your business can afford it, I think it competes very well with the other players in the space.
0
 
Jan SpringerConnect With a Mentor Commented:
I use nagios for monitoring.

cacti is good for utilization with plugins to monitor thresholds.  i believe that there is also a netflow plugin.

i prefer flow-tools and, visually, ntop.  you should also take a look at FlowViewer to to view utilization, top talkers, etc.
0
 
operationsITAuthor Commented:
@Jan, have you compared it to Ipswitch, solarwinds or opsmanager (manage engine) as I'm hearing these names a lot?
How long have you used it?  
What is the most useful aspect?
What would do you find to be missing?
Do you have to have any other tools in addition to this?  or were Cacti and FlowViewer past tools?
0
Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

 
Jan SpringerCommented:
I've used IPswitch and Manage Engine in the past.  i'm just not willing to pay for something that I can get for free.

Nagios:  excellent monitoring tool for hosts and services via many mechanisms (10+ years)

Ntop: excellent at graphing top talkers and graph by protocol (4+ years)

flow-tools: command line set of tools to collect data (for use by ntop and flowviewer) and to also query data directly (15+ years?)

I like apps like Ntop and FlowViewer but have found after the initial "coolness" has worn off, no one pays any attention to the pretty pictures.  It's nice that there is a gui to search flow data records but that's not really a big deal since that can be scripted.
0
 
rharland2009Commented:
I've used the Solarwinds platform for these functions with good success for many years.
We have visibility into all the items you mention with a combination of the Network Performance Monitor and Netflow Traffic Analyzer modules. The SW platform is built strongly around integration, so there's a single GUI for multiple modules, etc. It's certainly not unique, but I like the Solarwinds flow product for ease of mixing sFlow/Netflow information with good accuracy. Strong reporting/alerting/etc. are part and parcel of what the products deliver for us. Simple web-based frontend, etc. It's a highly customizable product and works well for our global environment.
0
 
operationsITAuthor Commented:
@rharland2009 - so you are using it now?  What is the best feature/What if anything are you missing?
0
 
operationsITAuthor Commented:
Great input thank you!
0
 
rharland2009Commented:
Glad I was able to provide some info for you!
0
 
Michael RojekCommented:
NetCrunch 8 is a great option to try out as well. It's an all-in-one monitoring suite combining server, app, log and network infrastructure monitoring. It's agentless, and has a focus on ease of use and automation.

Bandwidth can be monitored in many ways, but the coolest feature is the physical segments map. It shows you the physical connections between your devices, as well as the bandwidth going through them. Very useful for drilling down and finding bandwidth hogs.

Top talkers are displayed automatically, and it has window docking features to let you set up multi-screen displays.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.