Quantcast
Channel: THWACK: Message List
Viewing all articles
Browse latest Browse all 20396

Re: ORION+SNIFFER

$
0
0

Hi t3telecom

 

Even if your switch does not have flow features you still have a couple of options. Cisco switches support SPAN sessions and this means you can either mirror ports or VLANs to one or more ports. Lets say you want to monitor VLAN 1 and you have a sniffer (more about this below) connected to port 10. To get monitoring in place you just need to issue these commands

 

monitor session 1 source vlan 1 both

monitor session 1 destination interface GigabitEthernet0/10


Your next step would be to pick a tool to connect to the SPAN port and there are many to pick from. SolarWinds have just included packet capture capabilities in NPM 11 and it focuses on gatering timing and application name information. There is an interesting discussion about it on this page. You will see top level info like what apps are using bandwidth.

 

Another option would be to connect LANGuardian to the SPAN port. It focuses on users and applications and gives you in widget drilldown so you can go from top level application info and drill right down to see flow or application metadata. You can see a demo of it here which also shows how it can be integrated with Orion. Both NPM and LANGuardian are available as trials which you can download and see if any meets your requirements.

 

Hope this helps,

Darragh


Viewing all articles
Browse latest Browse all 20396

Trending Articles