[30315] in North American Network Operators' Group
RE: Netflow Type 7 (was RE: bw usage?)
daemon@ATHENA.MIT.EDU (rdobbins@netmore.net)
Wed Jul 26 16:05:13 2000
Message-ID: <7BDBFDCDD02AD311AB2700104BC4F3F7B6640E@atshost001>
From: rdobbins@netmore.net
To: hvisage@is.co.za, dhudes@hudes.org
Cc: nanog@merit.edu
Date: Wed, 26 Jul 2000 13:06:01 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Errors-To: owner-nanog-outgoing@merit.edu
I'm not confusing anything with anything, thanks - I want V7 directly from
my MPLS-enabled Catalysts in my core.
I'm very grateful for your advice, however.
-----------------------------------------------------------
Roland Dobbins <rdobbins@netmore.net> // 818.535.5024 voice
-----Original Message-----
From: Hendrik Visage [mailto:hvisage@is.co.za]
Sent: Wednesday, July 26, 2000 1:00 PM
To: Dana Hudes
Cc: rdobbins@netmore.net; nanog@merit.edu
Subject: Re: Netflow Type 7 (was RE: bw usage?)
Importance: High
Roland, you are confusing V8 (Aggregation) with V7 (Switches Cat5500+RSM or
Cat ^500)
in any case: http://www.caida.org for cflowd. Check the mailing list
for other references etc. but do check the rrdtool for frontends for
NetFlow data collected via Cflowd
Greetz
Hendrik
On Wed, Jul 26, 2000 at 12:26:52PM -0400, Dana Hudes wrote:
>
> Usually you don't want type 7, you want type 5. Let cflowd et al have the
full data. Type 7 the router has done aggregation for you. Good for reducing
> overall data rate to the flow capture system but bad for seeing what's
going on in your network.
>
> ----- Original Message -----
> From: <rdobbins@netmore.net>
> To: <nanog@merit.edu>
> Sent: Wednesday, July 26, 2000 12:11 PM
> Subject: Netflow Type 7 (was RE: bw usage?)
>
>
> >
> >
> > Does anyone know of a tool like Cflowd which will capture Netflow Type 7
> > stats? The only one I know of is the commercial product from Cisco; any
> > advice would be greatly appreciated.
> >
> > -----------------------------------------------------------
> > Roland Dobbins <rdobbins@netmore.net> // 818.535.5024 voice
> >
> >
> > -----Original Message-----
> > From: Alex [mailto:alex@nac.net]
> > Sent: Wednesday, July 26, 2000 8:23 AM
> > To: David M. Ramsey
> > Cc: nanog@merit.edu
> > Subject: Re: bw usage?
> >
> >
> >
> >
> >
> >
> > On Wed, 26 Jul 2000, David M. Ramsey wrote:
> >
> > > For now I've cobbled together some crude software to regularly
> > > read SNMP port byte in/out counters from our switches, stashing
> > > the deltas in a DB for later reporting/analysis.
> >
> > We do about the same thing, but we store absolute byte counts, relative
> > byte counts from the last measurement, and figure the kb/s; we also
store
> > AdminStatus and OperStatus for SLA purposes.
> >
> >
> > > I'm concerned that the data is misleading, though, in that it will
> > > include LAN broadcast traffic. Also, customers end up paying
> > > for other bandwidth that they did not want or induce, like network
> > > scans, etc. (tough luck?).
> >
> > Exactly, tough. If they use the bandwidth, then they should pay for the
> > bandwidth.
> >
> >
> > > We've considered implementing unique customer VLANS to separate
> > > customer broadcast domains, but it seems like that'd be a pain,
> > > would eat up IP addresses, and possibly tax our routers with all of
> > > the ISL/VLAN stuff?
> >
> > We do that; it's unwise to have everyone on the same VLAN, as some
others
> > have demonstrated.
> >
> >
>
