Re: [Cflowd] netflow question - Cisco file format

From: gab.seun jones.ewulomi (seun_ewulomi@hotmail.com)
Date: Thu Mar 13 2003 - 05:25:43 PST

  • Next message: Konstantinos Fotiadis: "RE: [Cflowd] netflow question - Cisco file format"

    Hi Edwin,

    Im currently on the verge of installing cflowd and flowscan. your website
    and netflow implementation has given a breath of encouragement. I wanted to
    give up.

    1)Can/Does cflowd/flowscan show per subnet statistics or
    is flow-tools capable of this

    2)The top summaries how is this generated. what other tools have you
    installed/integarted with netflow to get/generate this data in the tabular
    format

    regards,
    gab

    >From: "Edwin D. Vinas" <edwinv@asti.dost.gov.ph>
    >To: "Vladimir Jirasek" <Vladimir.Jirasek@t-mobile.co.uk>
    >CC: <cflowd@caida.org>
    >Subject: Re: [Cflowd] netflow question - Cisco file format
    >Date: Thu, 13 Mar 2003 08:21:41 +0800
    >
    >MessageHi,
    >
    >If you want collect netflow from routers, it is possible to use Cflowd.
    >Cflowd has two components -- cflowdmux & cfdcollect. When cflowd is
    >running, it will collect raw flow files version 5 format from
    >flow-exporters and saves the raw flow files in arts++ format. In our case
    >we are using Cflow to analyze these raw flow files. To graph the data you
    >can use FlowScan and to database it we used a custom program called FlowSQL
    >which stores the granular flow fields in a Postgresql database. This is an
    >example implemenation: http://noc.asti.dost.gov.ph/netflow/index.php Docs:
    >http://netmeas.asti.dost.gov.ph/docus/netflow/Netflow.pdf
    >
    >HTH :-)
    >
    >best regards,
    >--edwin
    >
    >-----------------------------------------------------------------
    >If Americans have atomic bombs & the Internet...
    >Filipinos are very far behind to catch up in any field.
    >-Edwin D. Viņas
    >edwinv@asti.dost.gov.ph
    >http://www.geocities.com/edwin_vinas
    >Science Research Specialist I
    >PREGINET Project
    >Advanced Science and Technology Institute
    >UP Technopark Complex, CP Garcia Ave, Diliman,
    >Quezon City Philippines
    >-----------------------------------------------------------------
    >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    >This communication is intended only for the person or entity to which it is
    >addressed and may contain confidential and/or privileged material. If you
    >are not the intended recipient, please note that any review,
    >retransmission,
    >dissemination, copying or other use of, or taking of any action in reliance
    >upon, this information by you or by persons or entities other than the
    >intended recipient is prohibited.
    >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    >
    > ----- Original Message -----
    > From: Vladimir Jirasek
    > To: 'cflowd@caida.org'
    > Sent: Wednesday, March 12, 2003 10:04 PM
    > Subject: [Cflowd] netflow question - Cisco file format
    >
    >
    > Hi,
    >
    > I have developed the tool that can read text files from Cisco Netflow
    >collector via ftp and analyse it down to application flow level. Now I want
    >to setup something similar but using Cflowd. I would like to use only
    >collector function and get raw data prefferably in Cisco format.
    > Is this achievable?
    >
    > Many thanks
    >
    > Vladimir Jirasek
    > Mobile: +447956542287
    > Fixed line: +442082142813
    > International Workgroup Corporate network (EU153)
    > T-Mobile International
    > Imperial place, Borehamwood, WD61EA
    > United Kingdom
    >
    >
    >
    >
    >
    > NOTICE AND DISCLAIMER:
    >
    > This email (including attachments) is confidential. If you have received
    >this email in error please notify the sender immediately and delete this
    >email from your system without copying or disseminating it or placing any
    >reliance upon its contents. We cannot accept liability for any breaches of
    >confidence arising through use of email. Any opinions expressed in this
    >email (including attachments) are those of the author and do not
    >necessarily reflect our opinions. We will not accept responsibility for any
    >commitments made by our employees outside the scope of our business. We do
    >not warrant the accuracy or completeness of such information.
    >
    >
    >

    _________________________________________________________________
    Worried what your kids see online? Protect them better with MSN 8
    http://join.msn.com/?page=features/parental&pgmarket=en-gb&XAPID=186&DI=1059

    _______________________________________________
    Cflowd mailing list
    Cflowd@caida.org
    http://login.caida.org/mailman/listinfo/cflowd

    This archive was generated by hypermail 2.1.4 : Thu Mar 13 2003 - 05:37:21 PST