Cisco Catalyst 3850 Netflow Support

Posted in Cisco NetFlow, General, netflow monitoring, Network traffic monitoring on March 13th, 2013 by Jake

We have added Cisco Catalyst 3850 Netflow support to the current release of Scrutinizer, NetFlow and sFlow Analyzer. This switch is no Catalyst 3750 as it offers both wired and wireless as well as native Netflow support without a 3KX module. The switch can enable multi-level QoS based on granular information such as SSID, client, radio, application and fair share policies for wireless, while Scrutinizer performs network traffic monitoring on all of these parameters for details.

Read more »

Tags: , , , ,

Cisco NetFlow Port Number

Posted in netflow monitoring on November 7th, 2012 by Jo-G
Cisco NetFlow Port Number

What is the preferred Cisco NetFlow Port Number to listen on?  Well, it depends.  The NetFlow RFC 3954 does not specify a specific NetFlow listening port, however, in my experience 2055 and 9995 or 9996 are the most popular.  Fortunately, our NetFlow solution, by default, will listen for any NetFlow/sFlow traffic sent to it on UDP ports 2055, 2056, 4432, 4739, 9995, 9996, and 6343.

Read more »


Joanne Ghidoni
Sr. Solutions Engineer

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

Tags: , , , ,

Catalyst 6509 NetFlow Support

Posted in Cisco NetFlow, netflow monitoring, Netflow Traffic Analysis on September 26th, 2012 by Danny
Catalyst 6509 NetFlow Support

Catalyst 6509 NetFlowCatalyst 6509 NetFlow support is essential, especially when the switch is set up as a core network device; this blog should help you get started with NetFlow traffic monitoring on 6500 series switches.

Enabling NetFlow on a 6509 is slightly different from the traditional IOS NetFlow setup. Here you need to keep in mind that NetFlow on the MSFC is collected in software, and on the PFC it is collected in hardware.  Beside the familiar IOS NetFlow commands,  Cisco 6509 NetFlow also requires enabling NDE in order to export flow statistics to the collector. Read more »

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

Tags: , , ,

How to Detect Advanced Persistent Threats – 2 Primary Technologies

Posted in advanced persistent threats, netflow monitoring, network behavior analysis on July 27th, 2012 by mike@plixer.com
How to Detect Advanced Persistent Threats - 2 Primary Technologies

Possibly the most difficult network malware to detect today is the Advanced Persistent Threat or APT. I’ve also heard them referred to as advanced targeted attacks. Before I digress on how to detect this insidious enigma, I would like to provide some history and clear up some misconceptions about this type of attack.

Read more »

Michael Patterson
Founder and CEO

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

Tags: , , , , ,