We've got OSS netflow monitoring with a mysql db.
The Netflow originates at a couple of routers, but.. we've replaced
some of our switches with active ones (Cisco 3550 & 3750's) which we'd
like to include in the existing monitoring software (which only
supports sflow & netflow). A way of approach would be, pulling and
converting sql statements. Considering the following setup:
sw -> trunk uplink (replicant) -- NIC
\
sw -> trunk uplink (replicant) -- NIC -- monitor box
/
sw -> trunk uplink (replicant) -- NIC
with 3 NIC's in a dedicated monitoring box to capture all of the
trunks's traffic with pmacctd. A more ideal solution (also in
compatibilty with other analysation products) would be to convert
incoming data on pmacctd and periodically transmit a netflow export to
existing netflow software (doesn't have to be full netflow support,
just the basics is fine).
This could also solve the interface & graphing problem pmacct is
having. Sure you've got flox, pmacct-fe and others but those still
have a long way to go, both in functionallity and user-friendliness
(*ahum* "easy" to install horde-framework ;-)). I'm sorry if I stepped
on someone's shoes with that saying that, I mean no harm with the
above statement.
Does anyone have another suggestion or comment on this idea ?
greetings
Tijl Van den Broeck
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists
