From owner-freebsd-isp Wed Jan 31 23:45:58 2001 Delivered-To: freebsd-isp@freebsd.org Received: from picalon.gun.de (picalon.gun.de [192.109.159.1]) by hub.freebsd.org (Postfix) with ESMTP id CB9EC37B684 for ; Wed, 31 Jan 2001 23:45:39 -0800 (PST) Received: (from uucp@localhost) by picalon.gun.de (8.9.3/8.9.3) id IAA14637; Thu, 1 Feb 2001 08:45:20 +0100 (MET) >Received: (from andreas@localhost) by klemm.gtn.com (8.11.1/8.11.1) id f117SwG32321; Thu, 1 Feb 2001 08:28:58 +0100 (CET) (envelope-from andreas) Date: Thu, 1 Feb 2001 08:28:58 +0100 From: Andreas Klemm To: Ernie Elu Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Netflow style packet counting Message-ID: <20010201082858.A32298@titan.klemm.gtn.com> References: <200101311201.f0VC1gR95512@spooky.eis.net.au> Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <200101311201.f0VC1gR95512@spooky.eis.net.au>; from ernie@spooky.eis.net.au on Wed, Jan 31, 2001 at 10:01:41PM +1000 X-Operating-System: FreeBSD 4.2-STABLE SMP X-Disclaimer: A free society is one where it is safe to be unpopular Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="J2SCkAp4GZ/dPZZf" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org --J2SCkAp4GZ/dPZZf Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Jan 31, 2001 at 10:01:41PM +1000, Ernie Elu wrote: > Is there any FreeBSD programs that work like NEtflow on a Cisco router? >=20 > All my main routers are all FreeBSD and I only have baby 2500 and 1600 se= ries > ciscos that wont' do netflow. So I am looking for some other method of > getting netflow like data. I have tried trafd 3.01 from the ports collect= ion > but it seems to require tcpdump like rules which seem a bit limited. And = it > seemd to chew up haeaps of RAM after a while. If you use IOS 12.0 or 12.1 T, then you can do Netflow Switching even on the 2500 Routers ... On the 1600 I'm not sure. Maybe on the 1600-R, which runs from RAM not from flash, which might allow running a slightly larger image... But I think the 1600 might be too slow to do all this stuff... Andreas /// --=20 Andreas Klemm - Powered by FreeBSD 4.2 SMP Need a magic printfilter today ? -> http://www.apsfilter.org/ --J2SCkAp4GZ/dPZZf Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: Weitere Infos: siehe http://www.gnupg.org iD8DBQE6eRA6d3o+lGxvbLoRAlhhAJ4rJI2eKvq3zc/GN/6Nwk1xTex2zQCgiSwa p4hqHAkpl7IdpU7Nu1HedKU= =yGwF -----END PGP SIGNATURE----- --J2SCkAp4GZ/dPZZf-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message