 |
|
|
|
|
|
|
|
|
|
|
|
|
 Subscribe to Bloggers speak out on BradReese.Com NetFlow vs. IPFIX Exporter Often times, pushing information using IPFIX, results in half the bandwidth consumed compared to an SNMP poll. Tue, 1/31/12 - 11:59pm View comments
Most companies today are leveraging IPFIX to export traditional NetFlow details and I'd like to take this opportunity to point out a few innovative IPFIX uses which may help inspire companies considering IPFIX to use it. IPFIX can be used to send just about ANYTHING! NetFlow vs. IPFIX Exporter Unless your company's name starts with C-I-S-C-O, using NetFlow and taking what you might think are unused element IDs is not an option. NetFlow and all of its elements are owned by Cisco. IPFIX however, allows vendors to share the same element IDs. This is because with IPFIX collection, elements are preceded by the vendor ID. The question of NetFlow vs. IPFIX is moot for doing anything truly innovative. Lets review a few IPFIX exports that send information that is very untraditional from a 'NetFlow' point of view. The applications are outlined below: IPFIX Exports Server Logs Microsoft server logs can be exported and sent to an IPFIX collector. One email reporting tool product called Mailinizer does exactly this. This small application reaches into the Microsoft Exchange server log and exports the events in IPFIX datagrams. The flow reporting front-end delivers reports on top emailers, top domains, top subjects, etc. Truly a unique implementation of IPFIX. Network Monitoring Solutions Export IPFIX
We developed a tool called Flowalyzer that can poll devices using ICMP and send the availability (1 or 0) as well as the round trip time in milli-seconds off to the IPFIX reporting tool in IPFIX datagrams:
The above application sends two templates to the IPFIX server. One template includes the performance of the collection process (e.g. devices polled, time it took, devices unresponsive, etc.) and the second template contains the data related to response time and availability as shown below:
Free IPFIX Export Application Recently one of our engineers started messing around with an IPFIX export application called LInEX: Lightweight Information Export I was told that it pretty much exports any Linux performance metric simply by defining the information elements alongside some regular expressions. Items like CPU, load, memory, processes, etc. can all be easily exported with this small GPLv2 app. It seems like applications like this could help migrate away from SNMP... and since the data is more structured, it can even be used for exporting logs. Often times, pushing information using IPFIX, results in half the bandwidth consumed compared to an SNMP poll. Join NetFlow Developments on Linkedin and get engaged in this exciting new technology. Related blogs: Systrax High-Impact Network Monitoring TMCnet Advanced NetFlow Traffic Analysis
Subscribe to Bloggers speak out on BradReese.Com
|
| |||
|
©2012 BradReese.Com - Home - About - Repair - Power Supplies - Refurbished - Blog - Quick Links - Site Map - Contact Us | |||||
