Tagged Questions

The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
1answer
1k views

How come the netflow data isn't showing up on the server?

I have a mikrotik router and it is sending trafficflow (fully compatible with netflow) data to my debian server that is running cacti. But after installing cacti's flowviewer plugin, cacti doesnt ...
2
votes
1answer
237 views

How useful is the sysUptime value in a Netflow packet?

The value is in theory precise down to the millisecond, but I am skeptical. Does that number tell when the packet was transmitted, or when the connection began or ended? Subsequently I noticed ...
2
votes
4answers
525 views

Can someone explain what NETFLOW. and IPFLOW are?

I hear these terms used a lot but haven't found a decent explanation of what they are, how they are used, and what the data looks like (e.g. can you view this data in wireshark?)?
1
vote
1answer
3k views

NTOP vs NFSEN, which one?

I want to monitor Cisco's newflows. Which one of these tools do you recommend?
0
votes
1answer
879 views

On RouterOS, how will transparent proxying (with DNAT) affect reporting of netflows?

I have a box running Mikrotik RouterOS, which is set up to do transparent web proxying, as described here. In short, this means that I have a firewall rule for destination NAT causing any port 80 ...
1
vote
2answers
1k views

On Mikrotik RouterOS, is it possible to get Netflow information from a bridged connection?

I have a RouterOS box set up to bridge two ethernet connections. I have use-ip-firewall=yes in the bridge configuration, so that the ports go through the firewall. I've enabled netflow reporting via ...
4
votes
5answers
22k views

Monitoring Bandwidth Usage (Per Internal IP) - Cisco ASA 5505

I manage a small network with a Cisco ASA 5505 and a shared DSL connection. I would like to be able monitor the bandwidth usage of the various users/devices on my network (by IP). Can I do that ...
1
vote
1answer
518 views

Implementing Argus (similar to netflow) what kind of information should I be gathering?

I am setting up a trial of Argus at my company as a diagnostic tool. We have a collector box attached to a monitoring port on our switch, and the initial plan is to redirect ports with unusual traffic ...
0
votes
1answer
1k views

How do I configure NetFlow 5/9 export on Juniper switches?

What are the commands to make a Juniper switch send netflow data (V5 or V9) to a netflow collector for bandwidth monitoring?
4
votes
3answers
7k views

Can I use Cisco ASA's “NetFlow Security Event Logging” (NetFlow 9) for bandwidth monitoring

Cisco has introduced NetFlow 9 export in the latest software version for ASA firewalls. But it seems to be meant for event logging of security events only (as a replacement for syslog messages). But ...
9
votes
5answers
5k views

Solution to route/proxy SNMP Traps (or Netflow, generic UDP, etc) for network monitoring?

I'm implementing a network monitoring solution for a very large network (approximately 5000 network devices). We'd like to have all devices on our network send SNMP traps to a single box (technically ...
1
vote
5answers
259 views

Netflows use cases?

My company stores netflows mainly for accidents` investigation. What other interesting use cases, tools for insight to your network or applications using netflows you know?