After a lot of work, we have support in Scrutinizer v7.3 with Flow Analytics for NBAR with Flexible NetFlow.  My contact at Cisco Jean-Charles <below> gave us some help. I wish we had him as a resident Cisco NBAR and NetFlow expert. 
jeanCharlesGriviaud

NOTE: You need to be using at least Cisco IOS v15 which just released in October of 2009 or something released more recently.  You will find the commands on how to enable NBAR in NetFlow in this Network World article publish by Brad Reese.

Once you have the exports being sent to Scrutinizer,  within a few minutes you can view the data.  The front end to display the data is only a start.  We can set thresholds for specific IP addresses, subnets, groups of NBAR applications, etc.

nbarConvTrend

Send me a screen capture or a diagram of how you want NBAR data displayed.  In return, I can offer you this coffee mug and a huge thanks of appreciation.

plixerMug

With your help, we can continue to make Scrutinizer and Flow Analytics a great NetFlow Analysis Solution.

Mike Patterson author pic

Michael

Michael is one of the Co-founders and the former product manager for Scrutinizer. He enjoys many outdoor winter sports and often takes videos when he is snowmobiling, ice fishing or sledding with his kids. Cold weather and lots of snow make the best winters as far as he is concerned. Prior to starting Somix and Plixer, Mike worked in technical support at Cabletron Systems, acquired his Novell CNE and then moved to the training department for a few years. While in training he finished his Masters in Computer Information Systems from Southern New Hampshire University and then left technical training to pursue a new skill set in Professional Services. In 1998 he left the 'Tron' to start Somix which later became Plixer.

Related

Leave a Reply