Cisco NetFlow with NTOP

[lobo66]

Hello all

Does anyone have any experience with setting up NetFlow on Cisco routers and exporting the output to NTOP. If you could point me to good doc's much appreciated.

THX

 

[ADB100]

Setting up NetFlow is a simple few lines of code on a router:

ip flow-export source loopback0
ip flow-export version 5
ip flow-export destination 10.1.1.1 9876

The destination specifies a NetFlow receiver and the UDP port number.

You then need to enable NetFlow switching on your interfaces, make sure your ingress and egress interfaces are configured so the exported data is correct:

interface Ethernet0
ip route-cache flow
ip flow ingress
!
interface Serial0
ip route-cache flow
ip flow ingress
!

You can verify whether it is working (on the router at least) with the commands:

show ip flow export
show ip flow interface
show ip cache flow

I have used AdventNet ManageEngine NetFlow Analyser which is simple to setup and free for 30-days, after that it allows you to monitor only 2 interfaces.

http://manageengine.adventnet.com/products/netflow/index.html

HTH

Andy

 

[PalmTest]

When the Netflow export is setup as ADB100 describes, I suggest you take a look at

http://www.openxtra.co.uk/products/ntop-xtra.php

This Windows version of NTOP is free.

Also take a look at

http://www.cisco.com/warp/public/732/Tech/nmp/netflow/partners/freeware/

for Netflow tools on Unix/Linux.
If you like the info for Netflow reports you might even think about

http://www.crannog-software.com/index.php?go=Product.ShowDetail&ProductID=1

Together with MRTG it provides me enough information to tackle most of the operational issues on my network.
Find a complete MRTG package at

http://www.openinnovations.com/mrtg