2 Replies Latest reply on Jan 12, 2009 2:25 PM by CPJ

    NetFlow aggregation

    CPJ

      Is there a way to summarise the NetFlow data and display an aggregation for the domain. As an example searching NetFlow for *.youtube.com displays each sub-domain.

      The end goal is to see how much data is being transmitted to/from youtube.com.


      ash-v177.ash.youtube.com (64.15.119.104)
      ash-v178.ash.youtube.com (64.15.119.105)
      ash-v179.ash.youtube.com (64.15.119.106)
      ..
      .. (100's more)
      ..
      sjl-v150.sjl.youtube.com (64.15.120.53)
      sjl-v152.sjl.youtube.com (64.15.120.55)
      sjl-v81.sjl.youtube.com (64.15.120.88)
      sjl-v82.sjl.youtube.com (64.15.120.89)
      sjl-v85.sjl.youtube.com (64.15.120.92)
      sjl-v86.sjl.youtube.com (64.15.120.93)
      sjl-v87.sjl.youtube.com (64.15.120.94)
      sjl-v88.sjl.youtube.com (64.15.120.95)
      sjl-v91.sjl.youtube.com (64.15.120.98)
      sjl-v94.sjl.youtube.com (64.15.120.101)
      sjl-v95.sjl.youtube.com (64.15.120.102)
      sjl-v98.sjl.youtube.com (64.15.120.105)
      www.youtube.com (208.65.153.240)

        • Re: NetFlow aggregation
          BryanBecker

          Here is what you can do :

          Go into the NTA tab.  If you don't have this already you need to add the Traffic View Builder view to your NetFlow Traffic Analysis Summary view.  You can do this via the admin page.

          Once you have Traffic View Builder you can build a view by dropping the list down and select 'Domain'.  You can enter 'youtube.com' in the domain name.  You select the vlan that leads out to your Internet.  For me I'm netflowing from the VLAN to the firewall that leads all associates to the Internet.

          That will give you total traffic over x time (depending on what you selected).

          Hope that helps.

          BB

          • Re: NetFlow aggregation
            CPJ

            BB, this is exactly what i was after.

             

            Thank you so much for your help.