Cisco 1701-K9-RF - 1701 ADSL Security Access Router : Datasheet : Page 266

Lab – Collecting and Analyzing NetFlow Data

2 active, 1022 inactive, 2 added, 2 added to flow

0 alloc failures, 0 force free

1 chunk, 0 chunks added

last clearing of statistics 00:09:48

Protocol Total Flows Packets Bytes Packets Active(Sec) Idle(Sec)

-------- Flows /Sec /Flow /Pkt /Sec /Flow /Flow

IP-other 2 0.0 193 79 0.6 1794.8 5.7

Total: 2 0.0 193 79 0.6 1794.8 5.7

SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts

Se0/0/0 192.168.12.1 Null 224.0.0.5 59 0000 0000 35

SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts

Se0/0/1 192.168.23.2 Null 224.0.0.5 59 0000 0000 33

Part 4: Explore NetFlow Collector and Analyzer Software

NetFlow Collector and Analyzer Software is available from many vendors. Some software is provided as

freeware, others are not. The following URL provides a summary web page of some of the Freeware NetFlow

software available:

http://www.cisco.com/en/US/prod/iosswrel/ps6537/ps6555/ps6601/networking_solutions_products_genericco

ntent0900aecd805ff72b.html

Review this web page to acquaint yourself with some of the available NetFlow Collector and Analyzer

software products.

Reflection

1. What is the purpose of NetFlow collector software?

_______________________________________________________________________________________

NetFlow collector software receives the NetFlow data that is exported from routers and switches on the

network. It filters and aggregates the data according to the policies set up by the network administrator, and

stores this summarized or aggregated data, instead of raw flow data, to minimize disk space consumption.

2. What is the purpose of NetFlow analyzer software?

_______________________________________________________________________________________

NetFlow analyzer software provides the means to do near real-time visualization and analysis of recorded and

aggregated flow data. It allows you to specify the router, aggregation scheme, and the time interval in which

you wish to view. You can then sort and visualize the data in a manner which makes sense for the users (bar

charts, pie charts, or histograms of the sorted reports).

3. What are the seven critical fields used by the original NetFlow to distinguish flows?

_______________________________________________________________________________________