Educause Security Discussion mailing list archives

Re: Netflow


From: "Clark, Joseph K" <ClarkJK () COFC EDU>
Date: Fri, 13 Oct 2006 16:20:00 -0400

Free tools: Ntop (http://www.ntop.org), nfdump w/ nfsen frontend

Configuration:
(http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr
/switch_c/xcprt3/xcdnfc.htm)

        On Port:        ip route-cache flow
        Global: ip flow-export destination 10.0.0.1 2030

Thanks,
Joseph Clark
IT, College of Charleston

-----Original Message-----
From: John Kaftan [mailto:jkaftan () UTICA EDU] 
Sent: Friday, October 13, 2006 4:01 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Netflow

I am tasked with determining how our internet connection is being used.
They want to know things % utilization of a particular server or
protocol.

I'm planning on using Netflow on my Cisco Router and some free tool to
collect and analyze data.

Can anyone give me any tips on this in terms of configuration on the
Cisco
and a tool for analysis?

Current thread: