analyse Traffic trough ASA

[Patrik Bolt]

Hi all

I am searching for a solution to analyse the traffic flows which go trough the ASA appliance. The informations which I want to gain are:

- which kind of traffic exists (protocols)

- destinations/sources

- amount of packets/bytes

- bandwith usage per flow and per aggregate flow

Does anyone know a software which can give me these infos? Is there a software which does not cost a lot?

Thanks

Patrik

[andrew.burns]

Hi,

This information is typically collected using netflow - however as the ASA doesn't support netflow you would need to configure this on the routers which connect to your ASA.

There are commercial packages here:

http://www.cisco.com/warp/public/732/Tech/nmp/netflow/partners/commercial/index.shtml

and open-source packages here:

http://www.cisco.com/warp/public/732/Tech/nmp/netflow/partners/freeware/index.shtml

HTH - plz rate if useful

Andrew.

[Patrik Bolt]

Thank you for the information.

Do you know a good logfile analyzing tool for ASA syslog logs?

Greets Patrik

[m.sir]

ASDM GUI interface gives you real-time event viewer, interface status - to include current kbps (utilization), input and output Kbps, and connections per second utilization... You also have a monitoring capability to get mote details on the traffic over past 5 days vs realtime.

M.