Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I want to monitor Cisco's newflows.

Which one of these tools do you recommend?

share|improve this question

put on hold as off-topic by masegaloeh, MadHatter, kasperd, peterh, Jenny D Apr 22 at 11:57

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

    
May have a better luck on softwarecs.stackexchange.com . –  peterh Apr 22 at 9:04
    
@peterh This post is 4+ years old. It was recently edited because of the tag cleanup, and as such bumped to the front page. –  Reaces Apr 22 at 11:33
    
@Reaces Thanks - but I found it in the close queue. –  peterh Apr 22 at 11:55
    
@peterh Looking up further what you might be linking to, I guess you ment software recommendations with a small typo. Apparently though so far they consider tool comparison off-topic. It's quite hard to find questions a home. –  Reaces 2 days ago
    
@Reaces Closing questions retroactively after 4 years is simply sick. –  peterh 2 days ago

1 Answer 1

up vote 6 down vote accepted

Both will do the job. NFSEN collects NetFlow flows using the nfdump tools, NTOP collects NetFlow and sFlow flows using nProbe, which means you can collect and process flows from Cisco, Juniper, Procurve, Extreme and a number of other devices. NFSENS is pretty much a dedicated NetFlow analyses tool and if all you're looking to do is look over flows then give it a go. NTOP is much more of a general network usage analyser with a NetFlow plugin. It'll give you all sort of network statistics and enable you to look at your flows, all from a single console. I'd recommend NTOP.

share|improve this answer
    
Hello Ossan, thank you for your reply. For what reasons do you recommend NTOP? I plan only to monitor cisco's netflows. My main goal is to gather statistics on which traffic protocols are being used in the network. –  Andre Dec 12 '10 at 10:26
    
Hi Andre, I prefer NTOP because by default it produces report style views into the collected data. The reports are easy to interpret and I'm able to drill down to specific hosts to find out how much bandwidth they've utilised, how many connections they have open and which protocols they're using. You get everything NFSEN gives you and a little more. –  Athanasios Dec 12 '10 at 13:00

Not the answer you're looking for? Browse other questions tagged or ask your own question.