InMon sFlow Probe

Media-speed Gigabit "route-aware" monitoring.

  • Accurate network traffic monitoring at Gigabit speeds.
  • Full layer 2-7 traffic flow measurements using sFlow technology.
  • "Route-aware" traffic flow measurements with "Virtual Tap"™ monitoring.
  • Cost effective monitoring of multiple switches/routers from a single probe.

The InMon sFlow Probe is capable of continuously monitoring application level traffic flows at a full 1Gigabit (up to 1,500,000 packets per second). Because the sFlow Probe can keep up with fully utilized Gigabit links, it can provide accurate and complete measurements when reliable measurements are most needed.

InMon's innovative sFlow technology combines traffic data with accurate interface counters and information obtained from switches and routers about their forwarding decisions.

With the "Virtual Tap"™ monitoring capability, the sFlow Probe collects forwarding and traffic information from remote devices. This breakthrough provides "Route-Aware" traffic flow measurements which map traffic flows to ports, VLANs, subnets and routes providing unprecedented visibility into the operation of switched and routed networks.

The InMon sFlow Probe operates in two modes:

  1. By attaching to a monitor/SPAN port it monitors mirrored traffic.
  2. Using a 10/100 port, the sFlow Probe gathers NetFlow and/or LFAP data. BGP routing information via iBGP, telnet, or ssh. In addition, switch and router interface statistics are collected using SNMP.

The resulting data is forwarded in sFlow datagrams to a central sFlow collector (for example InMon Traffic Server) for analysis.

A single InMon sFlow Probe can support multiple mirror/SPAN port interfaces in addition to "Virtual Tap" monitoring. This results in an inexpensive and administratively simple method to monitor multiple switches or routers from a single point. This cost effective deployment of sFlow Probes throughout the network, provides the continuous, network-wide coverage needed to proactively manage network traffic.

sFlow data from hundreds of probes can be sent to a single sFlow collector, such as InMon Traffic Server, for analysis. Traffic Server correlates and combines sFlow data to provide an accurate, real-time view of traffic across the network that can be used for a wide variety of traffic management tasks, including traffic accounting/billing, congestion management and the detection and control of denial of service attacks.

Technical Specifications

Protocols monitored with sFlow
Full layer 2 - layer 7 statistics:
Ethernet/802.3
IPv4/IPv6/ICMP/UDP/TCP
IPX
AppleTalk
DECNet4
FrameRelay
BGP4 (Full AS-Path)

Layer 2 statistics:
Full duplex port statistics
Traffic priority by port
VLAN statistics

Data Sources
Port mirror/SPAN
NetFlow versions 5 and 7
cflowd
Juniper sampling/port mirroring
LFAP versions 4 and 5
iBGP

Telnet
SSH

Minimum System Requirements
CPU
500MHz Pentium II

Memory
128MB RAM

Disk
1 GB

Network
10/100BaseT network interface
Tigon-based Gigabit Ethernet card: 3Com 3C985 or NetGear GA620

OS
RedHat Linux 7.x, 8.x, 9.x