Cisco Systems NetFlow Analyzer s manual Router Configuration, Using the NetFlow Analyzer

Page 2

the NetFlow Analyzer is listening on. Changing the NetFlow Analyzer listen port is done by going to Tools -> Options -> Analysis Modules -> NetFlow Analyzer, hitting the Options button, and then changing the port as shown in the screenshot.

Router Configuration

It is important to note that in order to receive NetFlow data, a router must be configured to send it to the computer that the NetFlow Analyzer is running on. Configuring a router is outside the scope of these instructions, but I know it can be done!

Note: Keep in mind that if the router is sending NetFlow data, and the NetFlow analyzer is not collecting it, the computer being sent the data will respond with ICMP Destination Unreachable packets.

Using the NetFlow Analyzer

Ok, now the fun begins. To use the NetFlow Analyzer, go to the top level tool bar and select the icons shown in the following image:

Oh what a messy desktop you have. To clean this up, and make it look more like a dashboard, go to the top level Windows menu and select Tile. Now adjust the windows, you should see something like this:

And that's it for the monitor, you are now all knowing and all powerful. But guess what, that's just the beginning.

Multiple NetFlow Capture Windows

With the global monitor you can collect NetFlow from one or more Cisco routers on different networks and aggregate the statistics into a single view. But let's say that you would like to monitor those networks separately. This can be achieved by creating separate NetFlow Adapter entries for each Cisco router, and creating a separate Capture Window for each.

As shown in the image, the key to separating different NetFlow feeds into separate captures is specifying the IP address of the Cisco Router in each NetFlow Adapter

entry. Of course, you can also use a non ip specific NetFlow Adapter entry for a real-time capture window as well and aggregate the feeds into a single capture window. The advantages of monitoring NetFlow with a capture window instead of the global monitor is that the Dashboard, the Expert, and the PeerMap are all capture window features, and not available in the global monitor. Below is a screen shot of a capture window with these features.

Image 2
Contents Introduction InstallationConfiguration as a collector Multiple NetFlow Capture Windows Router ConfigurationUsing the NetFlow Analyzer NetFlow Versions Capturing Other NetFlow PacketsInterface Statistics Beta NoticeSystem Requirements

NetFlow Analyzer s specifications

Cisco Systems NetFlow Analyzer is a powerful network traffic monitoring and analysis tool that provides organizations with deep insights into their network performance and traffic patterns. Built on Cisco's renowned NetFlow technology, the NetFlow Analyzer is designed to capture, analyze, and display real-time network data, enabling IT teams to make informed decisions to optimize their infrastructure.

One of the main features of Cisco's NetFlow Analyzer is its ability to monitor bandwidth utilization. Administrators can track which applications or users are consuming the most bandwidth, allowing for better resource allocation and management. This is crucial in a landscape where network demands are constantly evolving, and understanding bandwidth usage can help prevent bottlenecks and ensure smoother performance.

The tool employs advanced reporting capabilities, generating detailed reports on various network metrics, including traffic volume, peak usage times, and protocol distribution. These reports can be customized and scheduled for automated delivery, providing stakeholders with timely insights into network performance without manual intervention.

Cisco NetFlow Analyzer also benefits from its integration with various Cisco devices, leveraging proprietary technologies to enhance data collection and processing. This seamless integration allows users to gain a holistic view of their network, as it can correlate NetFlow data with other performance metrics from Cisco routers, switches, and firewalls, thus allowing for a comprehensive analysis of network health.

Another characteristic of the NetFlow Analyzer is its user-friendly interface, which presents complex data in an easily digestible format. Through dashboards and visualizations, IT staff can quickly identify trends and anomalies, making troubleshooting more efficient. The tool supports alerts and notifications, enabling proactive responses to potential issues before they escalate into critical problems.

Security is an essential aspect of today’s networks, and the NetFlow Analyzer aids in threat detection and mitigation. By monitoring network traffic patterns, it can help identify unusual activities that may indicate security breaches or malware infections.

In summary, Cisco Systems NetFlow Analyzer stands out as a robust solution for network traffic analysis, equipped with features such as bandwidth monitoring, advanced reporting, seamless integration with Cisco hardware, an intuitive user interface, and enhanced security capabilities. This comprehensive suite of tools empowers organizations to maintain optimal network performance, ensuring that their infrastructure can meet the demands of modern business operations.