Cisco Works, SNMP, MIBs.
hal07
New Member
Posts:
3
Joined:
Tue Nov 01, 2011 7:55 am

Daily reports of top sending and receiving IPs?

Tue Nov 01, 2011 8:00 am

I have a Cisco ASA 5510 which, by using the GUI, can give me a top IP list of senders and receivers during the last 24 hours. However I would like to automate a report every day written to a file (e.g. 2011-11-01_top10_senders.txt and _receivers.txt), so I can locate computers that sends/receives a lot of data over a period of e.g. 4 days.

I have done some scripting some years ago using rrdtool, but I wonder if anybody know a URL that have this mostly set up? RRDtool creates graphs and not lists like I seem to need now.

Any answer would greatly be appreciated.

User avatar
michoudi
Ultimate Member
Posts:
513
Joined:
Wed Sep 01, 2010 9:46 pm
Certs:
CCNA R&S/Security, IPS, FIREWALL, QoS

Daily reports of top sending and receiving IPs?

Tue Nov 01, 2011 12:57 pm

Netflow will give you this information, just turn off displaying of graphs in whatever tool you use.

hal07
New Member
Posts:
3
Joined:
Tue Nov 01, 2011 7:55 am

Re: Daily reports of top sending and receiving IPs?

Wed Nov 02, 2011 6:27 am

is netflow free? or is this an expensive toy?

User avatar
michoudi
Ultimate Member
Posts:
513
Joined:
Wed Sep 01, 2010 9:46 pm
Certs:
CCNA R&S/Security, IPS, FIREWALL, QoS

Re: Daily reports of top sending and receiving IPs?

Wed Nov 02, 2011 7:15 am

Netflow is free.

User avatar
scottsee
Post Whore
Posts:
1804
Joined:
Wed Feb 10, 2010 2:45 am
Certs:
NA:R&S, NA:Sec

Re: Daily reports of top sending and receiving IPs?

Wed Nov 02, 2011 8:18 am

In the Cisco ASA Netflow is actually called NSEL, I believe it is available in all Appliances post version 8.2. There are several free Netflow software applications but most are not. Scrutinizer free version is a nice one, it will only store data for 24 hours, and dosen't have the configurable front page. Just make sure the tool you use is capable of registering Netflow version 9, the ASA doesn't use version 5..

hal07
New Member
Posts:
3
Joined:
Tue Nov 01, 2011 7:55 am

Re: Daily reports of top sending and receiving IPs?

Wed Nov 02, 2011 9:01 am

if anybody would like to create a step-by-step guide for windows i would very much be interested. not detailed steps but enough to get me starting somewhere. where do i download netflow?

User avatar
ristau5741
Post Whore
Posts:
10452
Joined:
Tue Aug 21, 2007 2:15 pm
Certs:
Instanity

Re: Daily reports of top sending and receiving IPs?

Wed Nov 02, 2011 9:24 am

Configuring NetFlow on ASA with ASDM step guide

https://supportforums.cisco.com/docs/DOC-6114

How to Configure Windows nProbe to Send NetFlow ?

http://www.plixer.com/blog/netflow/how- ... d-netflow/
Tips of the day:
- The human mind is the ultimate creation invention.
- I have so many customers, my customers have customers.
- Sausage time
- POP, stack, and store

'

Return to Cisco Network Management

Who is online

Users browsing this forum: No registered users and 2 guests