Smart Logging Telemetry NetFlow Support
Posted in NetFlow on July 16th, 2011 by mike@plixer.com
Smart Logging Telemetry (SLT) is one of the latest NetFlow v9 exports from Cisco. This new export is very unique because the data in the flows isn’t just used for traditional NetFlow reporting such as top hosts or top applications. The hardware (e.g. Catalyst 3XXX) supporting this technology is actually helping to secure today’s networks by performing a type of network behavior analysis on the traffic trying to traverse the switch fabric.
Smart Logging and Telemetry:
- Cisco Smart Logging and Telemetry (SLT): This new technology exports NetFlow messages for traffic that is associated to a specific event on a switch (for example, an event triggered by an ACL-permitted or -denied packet).
- Layer 2 features such as Dynamic ARP Inspection, Dynamic Host Configuration Protocol (DHCP) Snooping, IP Source Guard, and Port ACLs can now log events (such as policy violations) to an external analyzer device by exporting event information and portions of packets over a NetFlow v9 transport.
- Available on the Catalyst 3750, 3560, 3750E, 3560E, 3750x, 3560x
The above support is shipping with our next major release.
Michael PattersonFounder and CEO
For a free 30 day trial of Scrutinizer, Download Now!
Sign up for Advanced NetFlow Training™ coming to a city near you!
Tags: Cisco NetFlow v9, NetFlow reporting, smart logging telemetry netflow
[...] Smart Logging and Telemetry Consider also the Smart Logging and Telemetry NetFlow technology available on the Catalyst 3XXX. This switch will detect threats, stop the [...]
[...] Network Traffic Monitor, Scrutinizer on August 26th, 2011 by Angela Are you looking to setup Smart Logging and Telemetry NetFlow (SLT) exports or to report on them? This blog covers how to enable SLT NetFlow [...]
[...] Cisco Smart Logging and Telemetry: This new technology exports NetFlow messages for traffic that is associated to a specific event on a switch (for example, an event triggered by an ACL-permitted or -denied packet). [...]
[...] the 3KX module the 3750 NetFlow Support is limited to Smart Logging Telemetry which is also pretty neat. If you have questions on your Walle NetFlow configuration, just [...]
[...] above is similar to Cisco’s Smart Logging Telemetry Report which is available in the Catalyst 3750 NetFlow [...]
[...] you ever heard of Cisco Smart Logging Telemetry? This is a type of NetFlow that captures packets when a threat is detected and automatically [...]
[...] More network security vendors are using NetFlow or IPFIX exports to send messages about the threats detected or quarantined as shown above. Another example from Cisco is called Smart logging telemetry: [...]
[...] above is similar to Cisco’s Smart Logging Telemetry Report which is available in the Catalyst 3750 NetFlow [...]
[...] Smart Logging and Telemetry Consider also the Smart Logging and Telemetry NetFlow technology available on the Catalyst 3XXX. This switch will detect threats, stop the [...]