tcp/ip data logging with sflow.

[Aytan]

Hello,

I can get tcp/ip traffic data( source IP,source port, destination IP, destination poprt ) from hp 2610 switch to an analyzer software with sflow. Is this method reliable .Are there any packet loss for sflow data.My purpose is collect ip connection data..

Thanks, 

[Rich R_1]

Two articles I found handy:

http://en.wikipedia.org/wiki/SFlow

http://www.draware.dk/fileadmin/SolarWinds/Guide/AN-S6_sFlow-PCM-traffic-mon-final-081108.pdf  --- Section 4

HP has a lot of documentation/manuals on SFLOW and its functionality/uses.  I use Sflow for your exact purpose and has done it well for my implementations.

[paulgear]

A good start to monitoring might be http://www.inmon.com/products/sFlowTrend.php, which is free for one switch at a time with no historical logging. Look at Inmon's other products for more advanced features. Other products to check out are Plixer Scrutinizer and Intermapper Flows.

[paulgear]

One other product i forgot: ManageEngine's NetFlow Analyser also supports sFlow. I plan to test the Plixer and ManageEngine products in the near future.