What is the best way to monitor taffic across a Campus?

I am trying to find the best way/ways to monitor traffic across a campus network. The two solutions I have thought of are using Netflow or ERSPAN. However, neither are supported by the devices in this network. Here is a quick overview of the network...
Core Switches (3750 Stacks) using Layer 3
|
Distribution Switches (3750 & 3650s) using L3 towards Core and L2 towards Access
|
Access Switches (Mostly 3500s) using L2
What are the best options for monitoring traffic on this type of network? All links between switches are Gig, so we have plenty of bandwidth. I would really like to be able to setup snort/ntop or something similar.
Are there any solutions available that I could use RSPAN and a monitoring computer at the Access Switches and have them report back to a central monitoring machine? I would prefer a centralized solution.
Thanks,
Garrett

Hello Garrett
Each monitoring software has its own limitations/specifications..
If you want to monitor traffic/protocols running on ur network, on a constant basis, you will have to use Netflow.. You can use a simple netflow collector, and collect reports, and analyze the application traffic on your LAN/WAN.. Not sure if this will help too much in troubleshooting, since this will be more used for trending your applications. You can probably discover new applications, which arent used much on your network, using this..
But for real troubleshooting, you will need something like a syslog server.. u can configure logging levels and push important errors/updates from the cisco gear to this box. In case your box goes down, or has issues, system log messages will be dumped to this server and will be a very useful device for troubleshooting... eg, kiwi cat, solarwinds, 3cdaemon, and lots of other freewares...
I would ideally have both these components on my network, for trending and troubleshooting..
apart from this, if you have other advance technology products, like wireless, application accelaration etc, there are other network management solutions available..
Hope this helps.. All the best.. rate replies if found useful
Raj

Similar Messages

  • What is the best way of monitoring HD content in FCP?

    I hope to get the Mac Pro listed below, What is the best way of monitoring my HD edit from FCP?
    Can I output to a HDTV, or is a computer monitor better?
    Do I need a capture card to output the signal, or is my below system adequate? i don't need one for capturing as i have will be using a Panasonic AG-HVX200 with P2 card, Can i use this camera to output to a TV/Monitor?
    Message was edited by: calihal

    Well, given your situation, the best option is the Matrox MXO and Apple Cinema Display. I have a full review here as to why it is a good solution.
    http://library.creativecow.net/articles/ross_shane/MXO.php
    This will cost you $995 for the MXO, and $900 for the Apple display. So under $2k. The other options are more expensive. Broadcast quality HD LCDs start at $3500. And other capture cards range from $295 (decklink Intensity) to $3500 (AJA and Decklink). And HDTV will still require a capture card, like the Intensity with HDMI out, but won't be suitable for broadcast quality. It will, however, be perfectly fine for seeing what your HD footage looks like on an HD set that most people will have in their homes. So I take back my initial statement and say that if you have a tower, the Intensity and HDTV is your best option...if you aren't needing full broadcast quality. If you just need to see what it looks like.
    Shane

  • What's the best way to monitor rMBP temperature

    I have istat, Ultra Fans, SMC Fan control and xscan.  Not a single one of them consistently reports the same termperature.  I'm at a loss to understand why I bother with any of them as all appear to report differnetly.  Is there a better alternative within the OS?  Surely Apple has a builtin method of monitoring termperature.

    Temperature Monitor provides a view of all sensors and can be adjusted to display the specific sensors you wish to monitor.  Istat, Ultra fan and SMC source data from specific sensors but not always the same sensor.  Once I instralled Temperature Monitor it became apparent each of the programs was gathering data from potentially different sensors.  While I was originally frustrated and belieiving the programs were reporting incorrect information they were in fact accurately reporting the sensor information they were accessing.  The beauty of Temperature Monitor is it gives you a view of all sensors. 

  • What's the best way to monitor VPN connection setup in a mesh?

    We have 24 Cisco ASA connected in a mesh using IPsec VPN tunnels.  From our hub location we have Sitescope monitoring each firewall and VPN tunnel to that firewall by ping its inside interface.  That works great from the hub location and is more of a hub and spoke model but this is a meshed VPN and I need to monitor the other sites. I don't want to put Sitescope servers in all locations nor would I do that. What are people using these days to monitor thier VPN tunnels?  How do you know when a location can't talk to another location?  Looking to be proactive here and not wait for an office to notify me that a tunnel is down.
    Thanks for the help.

    Anyone??
    Sent from Cisco Technical Support iPhone App

  • What is the best way to monitor a windows service on a domain controller?

    +1 for SW
    as another solution you can use this Tool “Total Network Monitor”
    http://community.spiceworks.com/how_to/show/2471
    look at #5 to monitor the service and restart, if it is not running
    a notification is also included #3

    We have a need in the office to monitor a specific service running on our domain controller
    Just wondering who else has implemented such a system out there? 
    Our SpiceWorks helpdesk does not run on the domain controller but is in the same domain incase it makes a difference  
    This topic first appeared in the Spiceworks Community

  • I have an old 30" apple cinema display (2005) I want to use as a 2nd monitor to a new iMac (2012).  I don't just want mirror image of iMac; what's the best way to do this?

    I have not bought the iMac yet but will do so very soon and just want to make sure I have what I need to get everything setup including adding the old faithful 2005 30" cinema display.  Currently I am driving the old 30" cinema display with a macbook pro also purchased 2005 and happy to say I got a lot of good miles out of this rig.  What's the best way to connect the old 30" monitor as a second display for the new generation iMacs?
    Other Questions
    I can find online new in unopened box a 2012 iMac 27" i7 with 1T Fusion Drive for $1899 no sales tax.  This seems like a pretty good deal since I notice the same is available from Apple refurbished for $100 more plus sales tax.  I know that they say the Fusion drive is a lot faster on 2013 models but some of the speed tests I reviewed online showed the 2012 i7 and 2013 i7 very close on speed for both storage and processing.  Any thoughts?
    I don't like changing batteries so I would buy a separate Apple keyboard with numeric pad since it only comes with wireless keyboard.  I'm a trackpad enthusiast having been using my macbook pro trackpad with current set up; and I am prepared to buy the Apple trackpad and replace batteries every 2 months but I would greatly prefer USB connection and rechargeable trackpact.  I know Logitech makes one so if anyone is using and knows how it compares to Apple's I'm all ears. 

    <http://support.apple.com/kb/HT5891>
    You can use USB for the Apple trackpad.
    <http://www.mobeetechnology.com/the-power-bar.html>

  • What is the best way to connect my new MBP to monitor - DVI, VGA or HDMI

    What is the best way to connect my new MBP to a computer monitor?  DVI, VGA or HDMI?  Thanks

    I recommend the Apple MiniDisplay Port to DVI adaptor.  I would avoid VGA.  MiniDisplay Port to HDMI will work as well (3rd party).
    http://www.apple.com/search/?q=dvi%20adaptor&section=mac&geo=us

  • What is the best way to connect 2 monitors to a Mac Pro 13 inch (2013)?

    What is the best way to connect 2 monitors to a Mac Pro 13 inch (2013)?

    If you want to connect 2 Displays you must do it one with the Minidisplayport and one by HDMI if you have a Retina 13 Inch. i think the old MBP doenst have HDMi Out

  • What is the best way to run dual monitors with a 2011 MBP?

    I have a 2011 MBP and i want to run dual 1920x1080 monitors. what is the best way to accomplish this? i also have a PC attached to the monitors with the DVI connection (but would be willing to change this to the analog, if necessary). so i have teh analog and HDMI connections available on the backs of the monitors.
    what i would like to do is hook the MBP through the HDMI if possible and then i would just be able to change inputs on the monitors depending in which computer i want to use (PC or MBP).
    any ideas would be greatly appreciated. thanks.

    csb814 wrote:
    I have a MacBookPro 17" 1.5 GHz running OS 10.5.7 with 1.5 GB Ram and would like to load Windows XP SSP2 so I can run several specific windows programs that are not Mac supported without a dualcore system.
    Ok, you either own a MacBook Pro with an Intel Processor, or a PowerBook with a PowerPC Processor.
    If your stated speed is correct, then you own a PowerBook, which will not run Windows natively. development & sales for Virtual PC has ceased. The only emulator still around, I think, is iEmulator & is terribly slow on G4s.
    Boot Camp does not work on PowerPC Macs.
    Please correct your signature & descriptions so we can identify the correct machine. Thanks!

  • What is the best way to make a program fit different monitor resoultions?

    In our lab all our test stations have 1280x1024 resoultion monitors. In the "other lab" all the test station monitors are 1440x900 resoultion.
    Now I am tasked with making my programs run on the test stations in the other lab. I have tried setting the options "maintain proportions of windows for different monitor resoultions" and "Scale all object on front panel as the windows resizes" and of course neither one of these options really does what I would expect it to do.
    What is the best way to make programs fit different monitor resoultions?

    J-M wrote:
    I resize the Front Panel when the program start to fit the monitor resolution.  After that, I use the "SBE_Determine If Screen Resized.vi" from TomBrass (http://forums.ni.com/t5/LabVIEW/Resizing-controls-on-a-tab-control-within-a-pane/td-p/1520244 ).  This vi is very useful if you don't want to monopolize the CPU with the "Panel Resize" event.
    I don't like this function for a couple reasons.  First for the example you don't need any custom code to handle the window resizing, just use a couple splitters.  Even if you did need to handle the resize, you only resize after the mouse is up after the resize which is not how normal Windows programs work they resize as the mouse moves.  So I modified the VI to resize objects as you resize the window.  Then because doing this can generate 100 events very quickly, I use a boolean in a shift register to make sure that we only handle the resize event if there is no new resize events after 0ms.  This essentially makes a lossy queue and handles the last resize event.
    Unofficial Forum Rules and Guidelines - Hooovahh - LabVIEW Overlord
    If 10 out of 10 experts in any field say something is bad, you should probably take their opinion seriously.
    Attachments:
    Resizable_Graph.vi ‏22 KB

  • I would like to display what's on my Mac Pro monitor on my iPad with as little latency as possible. What's the best way to do this?

    I would like to display what's on my Mac Pro monitor on my iPad with as little latency as possible. What's the best way to do this?

    Your image history (if I understand you properly) is stored in your catalog file, and nowhere else, and so it is only on a single drive.
    Do you mean you have edited photos on multiple drives? This isn't a problem for Lightroom at all, the software doesn't care, and you can leave things just the way they are. But if it bothers you for some reason, you can move the photos to a single drive if you want. In Lightroom select the desired photos or folders (it's easier to do this using Folders) and drag them to the desired drive.
    Alternative if you will be moving lots of folders: Adobe Lightroom - Find moved or missing files and folders

  • What is the best way to make a HDMI connection?

    I have a 13" Macbook Pro, bought in late 2011, therefore I have the Thunderbolt port. I do not think it has a mini DVI port. Therefore my question is what is the best way to connect this great Mac to a HDTV using an HDMI port on the TV?

    To connect MBP to HDMI monitor or TV via Thunderbolt port, use mini DisplayPort-to-HDMI adapter and HDMI cable. Thunderbolt port is mini-DisplayPort compatible. If you get the adaptor that supports video and audio signal, both will be forwarded to your monitor or TV. Search the Apple store.

  • What are the best apps to monitor tests and emails on childs phone

    what are the best apps to monitor tests and emails on childs phone?

    You could simply log into your child's email with the password that the two of you agree upon, and monitor the emails manually.  As for the texts, you could purchase a separate device, and use the child's Apple ID to monitor the iMessages.  For SMS/MMS, no way to monitor it.  You'll have to use the app called 'Random Parental Inspections'.

  • What is the best way to kill/stop a data load?

    Hi.
    What is the best way to kill/stop a data load?
    I have a data load from my QA R/3 system that is extracting 115.000.000+ records. The problem is that the selection in the function module used in the data source does not work, and the problem was not detected because of the nature of the data on the development system.
    I could kill processes owned by my background user (on both R/3 and BW) but I risk killing other loads, and sometimes the job seems to restart if I just try to kill processes. If I remove transactional RFCs in SM58 the load does not terminate; I only skip one or more datapackages. I have also tried to change the QM-status in the monitor to red, but that does not stop the load either...
    So isn't there a nice fool-proof way of stopping a dataload?
    Best regards,
    Christian Frier

    Hi,
    There r 2 ways to kill the job.
    One is using transation RSMO locate the job and display the status tab double click on the yellow light that is shown on the line total, a pop will come 'set overall status ' is displayed select the desired status that is red and save it. Then return to the monitor page and select the header tab double ckick on the data target right click and then goto 'manage',there should be request sitting there probably with yellow lights , highlight the line with the faulty request click the delete button then click refresh button.
    Second is goto SM37 and click on the active selection and enter the jobname and then click excute the particulr job should appear highlight the jobname then click on the stop iconthat appears on the taskbar( 3 rd from left)
    hope it is clear.
    Regards-
    Siddhu

  • What is the best way to get data to a user interface?

    Hi,
    I'm using labview 6i. I have an application with a handful of "core" vi's that actually run my application, doing the data acquisition, analysis, and control. I am currently using these same vi's for my user interface. I also have a number of vi's that contain menu's for configuring the "core" vi's. My questions is, what is the best way to seperate the "core" vi's from the user interface vi's. Global's, data socket, control references, others?
    Thanks for the help.

    Hi Sal,
    I have been a strong advocate of control refnums ever since LV 6i hit the streets. I recomend you look into using them to provide this conectivity.
    You could accomplish this by using a variation on the following.
    In your UI, create refnums for each of the controls or indicators that must be monitored or updated. Pass the appropriate refnums to each of the "core.i's" at program init time. Inside each of the core.vi's, use property nodes to read the control's values when appropriate and similarly for display purposes. (Note: Not all boolean mechanical actions are compatible with this technique. In those case you will have to explicitly write false values after find the control to be true or vise versa).
    By using this technique, you can keep the UI diagrams clea
    n. Depending on your app. the UI diagram could consist of the init's I mentioned above, and a while loop that watches if it's time to exit.
    Ben
    Ben Rayner
    I am currently active on.. MainStream Preppers
    Rayner's Ridge is under construction

Maybe you are looking for