Using Cisco NetFlow for Bandwidth Utilization Billing systems

Posted in NetFlow, Network Traffic Analysis, Network Traffic Monitor, Scrutinizer, sFlow on March 17th, 2010 by Jo-G
using-cisco-netflow-for-bandwidth-utilization-billing-systems

Looking for a reliable bandwidth utilization NetFlow billing system?  If you are already using Cisco NetFlow technology for network monitoring and management, then it’s just one more simple step to extending that to bandwidth billing.

Using the Service Provider Module for Scrutinizer NetFlow & sFlow Analyzer and a customized Billing Module, you can monitor the bandwidth usage of your customers and also provide  a data export to your current billing application.

The Service Provider Module allows you to restrict your customers to view specific devices and/or interfaces in Scrutinizer. The “Scrutinizer v7 NetFlow and sFlow Analyzer: Using the Service Provider Module” blog has more information on this module’s features.

The Billing Module is a customized solution using the enhanced features of the Service Provider Module ad importing that data into your billing application.

A custom data file (i.e. saved report filter) is created and exported every hour, giving the most granular data (1 minute intervals) available. The data file can include but is not limited to:

  • Time Stamp
  • Rate: bytes / second
  • Peak: same as above when reporting at 1 minute intervals
  • Totals: total bytes per minute


Any NetFlow or sFlow exported field can be included (bits, packets, percent, IP/MAC addresses, VLAN ID, applications, ToS, Autonomous System, etc.) if required.  The billing application or script can then read in the files exported by Scrutinizer at a definable interval.

You should also know that Flexible NetFlow using a Permanent Cache can also be used for importing data into your billing application.

If your billing application is based on 95th percentile measurements, this information is also available in the Traffic Volume report displayed below.

95th percentile billing allows for the top 5% of spikes in a given period to be dropped from the utilization reported.  In the example above, 95th percentile for Inbound is 99.78% and Outbound is 24.81%.  This report is based on a one hour timeframe, providing both Inbound and Outbound traffic for the T1 interface.

Interested in using Scrutinizer to get the data for your bandwidth billing?  Contact Plixer Sales at 207-324-8805 x3 for more information on this custom solution.

- Joanne


Tags: , , , , , , , , , , ,

Top 10 reasons for a sFlow or NetFlow Analyzer

Posted in NetFlow Analyzer on March 16th, 2010 by mike@plixer.com
top-10-reasons-for-a-sflow-or-netflow-analyzer

Are you thinking about deploying a NetFlow Analyzer for network traffic analysis? Here are some of the top reasons to collect NetFlow.  If you are in the market for a NetFlow or sFlow reporting tool, this list of 10 reasons should help you with your decision. Read more »

Michael Patterson
Scrutinizer Product Manager
Follow Me on Twitter
Tags: , , , , , , , ,

Apply Names to NetFlow Templates

Posted in NetFlow on March 13th, 2010 by mike@plixer.com
apply-names-to-netflow-templates

Scrutinizer v7.6 has been released.  One of my favorite features is the ability to rename NetFlow v9 templates, IPFIX templates and Flexible NetFlow Templates. We had to provide this feature since Cisco NetFlow does not export the template name.  Do you know why this is such a cool feature? Read more »

Michael Patterson
Scrutinizer Product Manager
Follow Me on Twitter
Tags: , , , , , , ,

SUNY Geneseo Solves Network Abuse Issues with Cisco NetFlow Technology

Posted in IT News, NetFlow, NetFlow Analyzer, Netflow Detective, Network Problem Resolution, Network Traffic Analysis, Network Traffic Monitor, Scrutinizer on March 3rd, 2010 by Jo-G
suny-geneseo-solves-network-abuse-issues-with-cisco-netflow-technology

SUNY Geneseo Network Manager Rick Coloccia found that analyzing Cisco NetFlow packets was the key to network traffic management and monitoring internet use and abuse.

Using Scrutinizer NetFlow Analyzer, he was able to respond to the RIAA’s (Recording Industry Association of America) allegations of students illegally downloading or sharing of music.
Read more »

Tags: , , , , , , ,

NetFlow in 1 second intervals

Posted in NetFlow, NetFlow Analyzer on February 24th, 2010 by mike@plixer.com
netflow-in-1-second-intervals

Do you ever need to see the NetFlow or sFlow data down to the actual second interval?  Did you know you can do it with your NetFlow Analyzer?  Sub minute visibility is only a click away for the Network Admin. Below I zoomed in on a two minute interval that I want to take a closer look at.  Read more »

Michael Patterson
Scrutinizer Product Manager
Follow Me on Twitter
Tags: , , , , , , , , ,

Messed Up Interface names in Scrutinizer

Posted in NetFlow, NetFlow Analyzer on February 18th, 2010 by mike@plixer.com
messed-up-interface-names-in-scrutinizer

We had a large carrier call us the other day with a messed up interface names issue in Scrutinizer.  The customer was exporting cflowd (NetFlow v5) from an Alcatel-Lucent SR 7750 running TMOS-C-5.0.R21.  Read more »

Michael Patterson
Scrutinizer Product Manager
Follow Me on Twitter
Tags: , , , , , , , , ,

Best Practices in Egress NetFlow Reporting

Posted in NetFlow, NetFlow Analyzer, Network Traffic Monitor, Scrutinizer on January 27th, 2010 by mike@plixer.com
best-practices-in-egress-netflow-reporting

Have you heard about exporting egress NetFlow? Do you want to know why it is different from ingress NetFlow or more importantly, when to implement it for network traffic monitoring? I’ll cover this topic in today’s blog. Read more »

Michael Patterson
Scrutinizer Product Manager
Follow Me on Twitter
Tags: , , , , , , , , , ,

What is NSEL? A Deeper Look – Part 2

Posted in ASA, NetFlow, NetFlow Analyzer, Scrutinizer on January 22nd, 2010 by scottr
what-is-nsel-a-deeper-look-part-2

A few months ago Nathan invited us to take a deeper look at NSEL. NSEL is the NetFlow exported from an ASA Firewall. He showed us how to enable and configure ASA for NetFlow.

Traditional NetFlow records upstream and downstream traffic between two end points as two different flows. In the case of an ASA device, most bidirectional flows are already assembled internally and are considered a single flow. So the flow records reported by NetFlow on an ASA Firewall will describe both directions of the flow.

Today I am going to do brief overview of what each of the templates is telling us.

Read more »

Tags: , , , , , , , , ,

Analyzing QoS Impact and Network Growth with a NetFlow Analyzer

Posted in NetFlow, NetFlow Analyzer on January 7th, 2010 by mike@plixer.com
analyzing-qos-impact-and-network-growth-with-a-netflow-analyzer

Networks tend to evolve over time. Over the past 5 – 7 years, I have seen VoIP and video push many network administrators to think beyond utilization and latency.  Prioritization is an important part of the mix today.  Although trying to absolutely guarantee QoS with Network traffic is impossible, it is possible to prioritize critical data and increase delivery time probabilities. Read more »

Michael Patterson
Scrutinizer Product Manager
Follow Me on Twitter
Tags: , , , , , , , , ,

What is Network Monitoring worth to you?

Posted in NetFlow, NetFlow Analyzer, Network Traffic Analysis, Network Traffic Monitor, Scrutinizer, sFlow on January 5th, 2010 by Jo-G
what-is-network-monitoring-worth-to-you

If you put a price tag on network monitoring for your organization, what would it be? $10,000? $100,000? $1,000,000?

And what needs to be included in that price? Staff to support the network? Network Monitoring hardware and software? Office space to house the staff and equipment?
Read more »

Tags: , , , , , , , , , ,