I have several different locations (Cities) on my network. Each 3rd octet (x.x.3rd.x) is a separate network (See chart below). The issue I'm having is when I look at my top talkers in Netflow v5 I see traffic from all my networks combined. I'd would only like to only see traffic that pertains to the 3rd octet. Is there anyway of setting up in the Cisco router or in PRTG to drill down and only see the network I setup per sub net?

Source IP Destination IP Bytes Other 58 MByte 26 % 1. server1.mydomain.com (192.168.36.2) lt1234.mydomain.com (192.168.2.134) 34 MByte 15 % 2. server1.mydomain.com (192.168.36.2) dt234.mydomain.com (192.168.3.70) 13 MByte 6 % 3. server1.mydomain.com (192.168.36.2) lt1091.mydomain.com (192.168.25.244) 10 MByte 5 % 4. lt1253.mydomain.com (192.168.75.80) server1.mydomain.com (192.168.11.21) 9,821 KByte 4 % 5. lt1281.mydomain.com (192.168.71.128) server1.mydomain.com (192.168.32.1) 5,917 KByte 3 %

Article Comments

Attention: This article is a record of a conversation with the Paessler support team. The information in this conversation is not updated to preserve the historical record. As a result, some of the information or recommendations in this conversation might be out of date.

You could use one Netflow sensor per octet and have it filter the incoming packets by IP with the include filter:

Sensor for City #1

(SourceIP[192.168.1.*] or DestinationIP[192.168.1.*])


Sensor for City #2

(SourceIP[192.168.2.*] or DestinationIP[192.168.2.*])

and so on :)


Jan, 2016 - Permalink