Netflow vs. SNMP for Network Monitoring - Ask the Engineer | Park Place

See full post: https://www.parkplacetechnologies.com...

Jack: Hello everyone, I'm Jack Kauter at Park Place Technologies and welcome to Ask the Engineer. Joining us this week is Senior Solutions Architect, John Diamond. Welcome, John.

John: Great to see you, Jack

Jack: John, this week's question is about monitoring protocol options. Specifically, what are the key issues a business should consider when deciding between SNMP and Netflow when monitoring their network.

John: Well, fundamentally, SNMP is a protocol that allows you to understand what the equipment you're monitoring is. How it's configured, and then from a resource utilization standpoint, it will give you indications of how much processor and memory resources are being used, and at the interface level, not only their level of utilization, or percentage bandwidth utilization, but also the number of packet corruption and discards that you have that gives you a richer understanding of the good and the bad nature of the traffic.

Jack: Sure, and what about NetFlow?

John: Well, NetFlow really adds the other half of the equation. NetFlow allows you to understand the nature of the traffic flowing through the interfaces on the devices. It'll give you an idea of the top conversations, the application mix, and where you've got an overloaded interface.

It will allow you to work out whether all of that traffic is legitimate, or whether some of it possibly could be offloaded elsewhere on the network.

Jack: Very interesting, and John, would you say there's a business case for both?

John: Oh, absolutely. Without both, you're really only seeing half of the picture. With the SNMP, you're seeing the full resource utilization dimension of the device, both physical resources and also bandwidth utilization resources, and also errors on the interfaces.

With NetFlow, you're getting an indication of the nature of the traffic. But, don't forget, it only tells you about the good traffic; It doesn't tell you about the problems, and it won't tell you about the resource utilization of the devices. So, they really do go hand in hand.

Jack: Thanks John, great insight and a brilliant comparison.

If anyone has any follow-up questions, or different questions that you'd like to ask our engineer, please comment below this video, and we'll see you next time on Ask the Engineer.