My company stores netflows mainly for accidents` investigation. What other interesting use cases, tools for insight to your network or applications using netflows you know?
Tell me more
×
Server Fault is a question and answer site for
professional system and network administrators. It's 100% free, no registration required.
|
|
|
I have seen them used to detect problems in real time excessive activity as well as low activity. Good way to spot problems before the end user does. |
|||
|
|
|
In my organization (a university residential college), we rely on netflow data to bill our students for data usage; in Australia, data is so expensive (currently AU$5/GB for us, I believe) that we can't afford not to pass on the cost to our students. |
|||
|
|
We use netflows for "troubleshooting" purposes. The main Use Case is tracking down people who decide to try streaming video over WAN links to one of the smaller remote locations destroying the user experience for other employees there. We also log this data to watch trends in usage. It can be useful for the help desk to see as well so they can explain why there may be slowness somewhere. The tool we use for most of this is a product called ReporterAnalyzer by NetQoS. Although I've also done similar things for free with zenoss/cacti. |
|||
|
|
|
it's used to know where your bandwidth goes/comes from - comes handy when you use bgp and plan adding more peerings - based on existing data you can predict how much traffic goes to which ASes and guess how much you can offload your transit providers by connecting to for instance traffic exchange point or another provider. |
|||
|
|
|
Netflow is handy for basic info like high-bandwidth users. If you want more detailed network stats try a product from ExtraHop Networks. There's a demo available at http://www.networktimeout.com where you can upload a packet capture for analysis. |
|||
|
