Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Need information on a Catalyst 4500 without NetFlow

I'm looking for alternatives to NetFlow to use with some Catalyst 4500s. I'd like to use NetFlow with them, but unfortunately, I don't have the necessary hardware. These switches are showing some unusual traffic lately, and I need to figure out what it is.

Thanks!

Find more posts tagged with

Accepted answers

All comments

Nux

could you use a span port and a sniffer to capture the traffic?

hspeirs

I've got a couple of 4500's as well, and likewise lack the NetFlow hardware. What I do is use the port forwarding to monitor the port I'm interested in, and have that traffic sent to a linux box running softflowd (www.mindrot.org/.../) , it's a Linux implementation of NetFlow, that then forwards the Flow stats to NetFlow Analyzer.

Steve_Pfister

I see... I'll have to try that. It should be handy. Is there anything to do when you don't know the port? The reason this topic came up was we had some remote sites that seemed to have an inordinate amount of outgoing traffic (and some at a time when the sites should have been nearly empty). Thanks for the suggestion, though...

hspeirs

Steve,

Do you have routers at the remote sites that are NetFlow capable ? Alternatively monitor the local port that the router is connected to.

Steve_Pfister

No, unfortunately the remote sites that have the 4500s are all switch-based.

--Steve