Tool to make statistics on a span port

[patoberli]

Hi All

We soon get new Internetrouters, two C3560X with IPServices, which don't offer Netflow. They do offer Spanports which I like to utilize.

I found several tools like nfsen or Scrutinizer which can make nice statistics about the link usage and the IP addresses creating the most traffic (the main feature I need).

Do you know of any software that offers those features with a Span port?

Thanks,

pato

[hobbe]

The new software version 12.2(58) seems to have some interesting points about this.

Cisco smart logging and telemetry (SLT)  that sends to a netflow analyzer.

http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps10745/product_bulletin_c25-658743_ps7078_Products_Bulletin.html

I have not tested it yet myself but on paper it looks good.

so this might be something for you ?

Good luck

HTH

[patoberli]

This sounds interesting, but is probably not what I need.

I would like to analyze all the traffic flowing through the router.

I wonder if our ASA 5520 would be enough powerful, but it seems (at least on the paper) that the generated Netflow information there misses the packetsize part