[ietf85-tech] InMon for IETF meetings

[Neil Mckee]

OK,  we added the license so you should be able to download the software now.   It doesn't run on BSD (yet) so a Centos 6 VM is your best bet.    I'm not worried about scalability here so you don't need to go nuts on the spec.   A 2-core VM with 4GB RAM would be plenty,  but you can go up from there if you want.

None of those Cisco devices support sFlow (or even Cisco NetFlow) so it looks like the monitoring will be:

1.  J-Flow v9 with v4 and v6 templates from the Juniper routers.
2.  If you allow the inmon server to make a read-only BGP-Peering connection then we can splice the full AS-Path details in too.
3.  SNMP from the routers and switches (interface counters, host-locations, topology, etc.)
4.  sFlow-HOST from the hypervisors,  and optionally your VMS:

http://host-sflow.sourceforge.net

5.  If you want,  there are agents for web-servers, java-VMs and more:

http://host-sflow.sourceforge.net/relatedlinks.php

Regards,
Neil

P.S.  Shall I send you my public ssh key?  I'd be coming in from 38.99.24.226 (server.inmon.com).




On Nov 5, 2012, at 10:23 AM, Bill Jensen <wej at doit.wisc.edu> wrote:

> Neil,
> 
> We are running an IPv4/IPv6 environment with (2) Juniper M7i routers, (20) Cisco 3750/3560 switches and (~100) Cisco 1250 APs.  We have around 3000 user devices on the network.  I'm not sure what the number of flows or the flow rate might be but if I had to hazard a guess I would not expect more than several dozen flows per second and >10,000 active slows.
> 
> We are using the 130.129.0.0/16 network.  It is divided into several (typically) /22 blocks.
> 
> Our "normal" systems are FreeBSD VM guests but we can set up others (like CentOS) - or maybe you have a canned VM.  We have quite a bit of horsepower on our physical machines so just let us know ballpark memory and disk requirements.
> 
> We can easily direct flow export data from the Junipers to your collector and provide RO SNMP access to all network devices.
> 
> We just need to work out setting up a suitable machine and giving you access to it as needed.  I have requested a license for the Sentinel product.
> 
> Thanks,
> -wej
> 
> On 11/5/12 11:14 AM, Neil McKee wrote:
>> Certainly.  No problem.  If you register at http://myinmon.com and request an eval then we can allocate a license.
>> 
>> And I'd be happy to log in and help with the setup.  We learn a lot from doing this as SC.
>> 
>> What switches and routers do you have there?  What wifi devices? Given SNMP credentials and IP ranges we could start by running a sweep.  Then we can figure out where we can get flow-monitoring turned up.
>> 
>> Neil Mckee
>> 
>> 
>> 
>> On Nov 5, 2012, at 7:19 AM, "Bill Jensen <wej at doit.wisc.edu>" <wej at doit.wisc.edu> wrote:
>> 
>>> Hi Neil,
>>> 
>>> The IETF85 meeting is beginning its week long stay in Atlanta.  Like SC, IETF meetings deploy their own network for attendee use.  I regularly assist in setup and management of this temporary network.  For monitoring, we use a collection of opensource tools including netdisco, cacti, observium, smokeping, etc.  Occasionally, we collect flow info from our routers but most tools come up a bit short in terms of flow info or configuration effort.  As we were setting things up, we noted that it would be nice to have a tool link InMon.  I was wondering if it would be possible for you to set us up with a license that we could use for IETF meeting network use.  If it helps, we run our monitoring and service machines as VM guests.  Let me know if you think this is something feasible.
>>> 
>>> thanks,
>>> -wej (SC & IETF network lacky)
>>> 
>>> --
>>> Bill Jensen, Network Engineer
>>> UW-Madison DoIT Network Services
>>> 1210 W. Dayton St., Madison, WI  53706
>>> voice: 608-263-9325  efax: 413-208-1297
>>> email: wej at doit.wisc.edu   cell: 608-576-8345
>>> sms: 6085768345 at vtext.com
>>> 
>>> --
>>> Bill Jensen, Network Engineer
>>> UW-Madison DoIT Network Services
>>> 1210 W. Dayton St., Madison, WI  53706
>>> voice: 608-263-9325  efax: 413-208-1297
>>> email: wej at doit.wisc.edu   cell: 608-576-8345
>>> sms: 6085768345 at vtext.com
> 
> -- 
> Bill Jensen, Network Engineer
> UW-Madison DoIT Network Services
> 1210 W. Dayton St., Madison, WI  53706
> voice: 608-263-9325  efax: 413-208-1297
> email: wej at doit.wisc.edu   cell: 608-576-8345
> sms: 6085768345 at vtext.com