[30305] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Netflow Type 7 (was RE: bw usage?)

daemon@ATHENA.MIT.EDU (rdobbins@netmore.net)
Wed Jul 26 12:10:32 2000

Message-ID: <7BDBFDCDD02AD311AB2700104BC4F3F7B6640A@atshost001>
From: rdobbins@netmore.net
To: nanog@merit.edu
Date: Wed, 26 Jul 2000 09:11:43 -0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Errors-To: owner-nanog-outgoing@merit.edu



Does anyone know of a tool like Cflowd which will capture Netflow Type 7
stats?  The only one I know of is the commercial product from Cisco; any
advice would be greatly appreciated.

-----------------------------------------------------------
Roland Dobbins <rdobbins@netmore.net> // 818.535.5024 voice
 

-----Original Message-----
From: Alex [mailto:alex@nac.net]
Sent: Wednesday, July 26, 2000 8:23 AM
To: David M. Ramsey
Cc: nanog@merit.edu
Subject: Re: bw usage?






On Wed, 26 Jul 2000, David M. Ramsey wrote:

> For now I've cobbled together some crude software to regularly 
> read SNMP port byte in/out counters from our switches, stashing 
> the deltas in a DB for later reporting/analysis.

We do about the same thing, but we store absolute byte counts, relative
byte counts from the last measurement, and figure the kb/s; we also store
AdminStatus and OperStatus for SLA purposes. 


> I'm concerned that the data is misleading, though, in that it will
> include LAN broadcast traffic.  Also, customers end up paying 
> for other bandwidth that they did not want or induce, like network 
> scans, etc. (tough luck?).

Exactly, tough. If they use the bandwidth, then they should pay for the
bandwidth.


> We've considered implementing unique customer VLANS to separate
> customer broadcast domains, but it seems like that'd be a pain,
> would eat up IP addresses, and possibly tax our routers with all of
> the ISL/VLAN stuff?

We do that; it's unwise to have everyone on the same VLAN, as some others
have demonstrated.




home help back first fref pref prev next nref lref last post