Haha, found it! Have you looked at ntop/nprobe?<br><br><a href="http://www.ntop.org/overview.html">http://www.ntop.org/overview.html</a><br><br>and<br><br><a href="http://www.ntop.org/nProbe.html">http://www.ntop.org/nProbe.html</a><br>
<br>nProbe can act as a netflow generator (you would install it on your router), and as a collector and analyser (it's synonymous with nfsen/nfdump). You can install it in both modes on the same machine, or split it so that collection and analysis is performed elsewhere.<br>
<br>It exports in the Netflow format, so you can use any analyzer you choose, you're not bound to nProbe/ntop for collection.<br><br>Adam<br><br><div class="gmail_quote">On Thu, Dec 11, 2008 at 9:35 AM, Christoper Fowler <span dir="ltr"><<a href="mailto:cfowler@outpostsentinel.com">cfowler@outpostsentinel.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div class="Ih2E3d"><br>
> We are using nfsen here. It works great. I'm still working on getting the reports formatted the way I want but that's just a matter of tweaking/post processing.<br>
><br>
<br>
</div>What Cisco hardware are you using. I want to test NetFlow but<br>
all I have are Cisco 2900 and 3550XL switches. I do not use<br>
Cisco for layer 3 anything. Linux only there.<br>
<br>
My goal is to see ALL traffic on my network. Even traffic passing<br>
between port 1 and port 5 of a 2900.<br>
<br>
Chris<br>
<div><div></div><div class="Wj3C7c">_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
</div></div></blockquote></div><br>