Subject: Re: Adding Protocols and Per Subnet stats ?
From: Dave Plonka (plonka@doit.wisc.edu)
Date: Thu Aug 10 2000 - 16:00:14 CDT
On Thu, Aug 10, 2000 at 09:18:55PM +0100, Kevin Gannon wrote: > > Some newbie question so please bear with me, we actual have flowscan > running fine for a customer to monitor internet traffic which is great > it allowed us to get stats on a core router without any downtime within > eight hours quicker than a courier could get us a hardware probe. We > are running it on a cobalt box (http://cobaltnet.com) > > Now I want to use to monitor non internet type traffic of custom apps. > How do I add protocols that is will monitor and build the service > graph based on ? What is "non internet type traffic"? Do you mean non-IP? (If so, FlowScan is the wrong tool - it only does IP... you want to learn to use RRDtool directly or one of it's frontends like MRTG or Cricket directly. Then you can mix-and-match statistics from those or FlowScan and graph to your heart's content.) Do you mean LAN traffic? (as in traffic that doesn't go through to commodity internet/WAN?) If so, you need to get a probe (i.e. Cisco router, or Cisco Catalyst with netflow options, or CoralReef machine) to watch traffic at that point. > How do I break down the traffic per subnet I am confused to the > difference between the subnetio and campus io config files ???? If you just want traffic totals by subnet, SubNetIO can give you byte, pkt, and flow counts by subnet. (Which should be sufficient for usage-based billing or whatever.) If you're running CampusIO, adding SubNetIO is just a matter of setting up "flowscan.cf" to run it instead of CampusIO and doing the things described in the INSTALL doc. (Others in the list know how to do this too.) If you mean that you want to get the protocol and services graphs (i.e. applications) for each subnet, join the club. That feature is not in FlowScan yet and unless you're a perl programmer with copious free time, your stuck waiting for developers to build it. (FlowScan doesn't do it yet cuz I'm short on the latter myself.) > Please help man under pressure, I hate bosses see something and > suddenly they are aware of what it can and cant do !!!!!. And of course > everything is a fiveteen minute job :( FWIW, tell them I guarantee that it's not 15 min job. ;^) Just answering this question takes longer than that. Thanks & Regards, Kevin -- plonka@doit.wisc.edu http://net.doit.wisc.edu/~plonka ARS:N9HZF Madison, WI -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe flowscan" in message body Archive http://net.doit.wisc.edu/~plonka/list/flowscan/archive/
This archive was generated by hypermail 2b25 : Thu Aug 10 2000 - 16:02:11 CDT