Ethereal-users: Re: [Ethereal-users] What to Use - Ethereal Filter or Diff Program to Capture on

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Sake Blok <sake@xxxxxxxxxx>
Date: Thu, 23 Feb 2006 03:28:36 +0100
On Wed, Feb 22, 2006 at 01:58:31PM -0600, Scotty Strunk wrote:
> Should have provided more details.  Am working with devices on the same
> subnet, so they're either connected to the same switch, or a downstream
> switch.  They are Cisco switches, but I though NetFlow only worked with
> routers.

Maybe I should have provided more details too :)  There is a link on the
ipflow page to NFSIM, a NetFlow simulator:

"The Netflow Simulator (NFSIM) reads packets from an Ethernet device
configured in promiscuous mode, builds a Netflow cache (like a router)
and then send flows to one or many collectors for analysis. "

(From: http://www.ipflow.utc.fr/index.php/Introduction_to_NFSIM)

Together with ipflow, that should get you on the way I think?


Cheers,  Sake