I have router that I am monitoring via SNMP and I am wondering if there is a way with Orion to view the IP information. We are experiencing high receive utilization on the interface and I would like to pinpoint who the culprit is.
This is exactly what the Netflow module is for. As far as this being your Internet router, this is the primary device type you do want to have Netflow analysis on.
This is a device which is typically changing down to a lower bandwidth size and therefore utilisation analysis is highly beneficial to have access to.
As for security, and I am assuming this router is directly connected to your LAN, ensure you specify the internal LAN interface to be the source for Netflow within the configuration you apply to the device. This way no information is being leaked.
Hope this helps
Have you looked at the Netflow module?
Hey Brandon,
We do have the netflow module, but since this is our internet router we have not wanted to open up the necessary port to allow the netflow data to hit Orion. Has that been the typical setup? we were thinking there would be some security risks if we opened up that port.
Any users here on thwack want to chime in on this thread?
I don't see a security risk with gathering netflow data.
I agree with the post by Dobbs.
That my my instinct as well, but wanted to get some second and third opinions, thanks all!
Awesome! Thanks everyone! I will get this setup on our end.
