Does Netflow fulfill Your requirements? It contains pkt
header
information+some extra bits like AS number, etc.
You could do it with sampling ratio 1:1 AND Monitoring
PIC/AS-PIC RE-based
sampling has a 7kpps limit). Requires E-FPC and takes 1
slot.
Otherwise port-mirroring could suffice.
For really comprehensive solution look into DFC (Dynamic
Flow Capture), You
will need a separate box.
Rgds
Alex
----- Original Message -----
From: "Billie Chan" <billie_chan smartone-vodafone.com>
To: <juniper-nsppuck.nether.net>
Sent: Tuesday, December 12, 2006 10:38 AM
Subject: Re: [j-nsp] GGSN Ericsson
>
> I also have E/// GGSN I don't think it's possible to
run gtpdump or
> tcpdump.
>
> -----Original Message-----
> From: juniper-nsp-bouncespuck.nether.net
> [mailto:juniper-nsp-bouncespuck.nether.net] On Behalf
Of lag0dao2.pl
> Sent: Tuesday, 12 December, 2006 6:14 PM
> To: juniper-nsppuck.nether.net
> Subject: [j-nsp] GGSN Ericsson
>
> Hi.
> I have question about GGSN Ericsson. It is possible to
run gtpdump or
> tcpdump or something like this to monitoring online
traffic ?
>
>
>
> Best Regards
>
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsppuck.nether.net
>
https://puck.nether.net/mailman/listinfo/juniper-nsp
>
> Unleash your life. Broadband To Go.
> www.GetMoving.com.hk
>
> ************************************ E-mail Disclaimer
> ************************************
> This e-mail message (together with any attachments) is
confidential to the
> addressee
> and may also be privileged. If you are not the intended
recipient, you are
> hereby notified
> that any dissemination, distribution or copying of this
message is
> strictly prohibited.
> Please also notify the sender immediately by return
e-mail and delete it
> from your system.
>
> Internet communications cannot be guaranteed to be
secure or error-free.
> The sender and the entity through which this message is
sent therefore do
> not accept
> liability for errors or omissions as contained in the
message and any
> spreading of viruses
> as a result of Internet transmission.
>
> Any opinions contained in this message are those of the
sender personally
> and would
> not bind any entity unless otherwise clearly stated and
with the authority
> of the sender
> duly verified.
>
************************************************************
*******************************
>
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsppuck.nether.net
>
https://puck.nether.net/mailman/listinfo/juniper-nsp
_______________________________________________
juniper-nsp mailing list juniper-nsppuck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
|