[CentOS] cisco netflow analyzer?

Tue Feb 24 01:13:51 UTC 2009
nate <centos at linuxpowered.net>

Robinson Tiemuqinke wrote:
> Anyone knows any Cisco netflow analyzer that could run on Linux/Windows? I
> know that cisco ASDM works at somewhat level but too rough...
>
> For example, CIsco ASDM can only shows at IP level and only three types
> graph, like top 10 source Address, top ten destination level, or top ten
> services. but I want the analyzer to show different traffics from the same
> box when in need.

ntop can read netflow events, the server runs in linux(maybe works
in windows too),the client is browser-based so you can access it from
almost anywhere..

netflow is somewhat restricted as far as what info you can get, I've
only used sflow, a brief comparison of the protocols is at the
bottom of this pdf:

http://www.sflow.org/sFlowOverview.pdf

ntop can read sflow as well, though last time I tried it it was unstable,
I used sflowtrend instead.

nate