Fluke Recording Equipment manual Using NetFlow Tracker

Page 21

User’s Guide – version 3.1.3

NetFlow Tracker

Using NetFlow Tracker

Once you have installed NetFlow Tracker and configured your devices, data will be available within a few minutes. There are many ways to access this data.

Real-time Data

NetFlow Tracker stores up to fourteen days full NetFlow data with one minute resolution. This data can be reported upon once it is several minutes old. There are several ways to view reports on this data – from the Network Overview page, from the Devices page or from the Filter Editor.

Long-term Data

In addition to automatically storing full data for up to fourteen days, NetFlow Tracker can be configured to store summarized data for any length of time. Long-term data is not stored automatically; long-term reports must first be set up using the Report Settings page. See the Long-term Reports chapter for more about setting up and viewing long-term reports.

Executive Reports

You can configure custom reports using the Report Settings page that contain sections from multiple real-time or long-term reports. See the Executive Reports chapter for more about setting up and viewing executive reports.

Network Overview

The Network Overview page is accessible from the home page of the software; if you do not have user security set up (see Security Settings) it is also the default page you see when you access the software.

The page gives you a simple overview of the devices and interfaces currently carrying the most traffic on your network. You can click on a device in the pie chart or on its name to see its top applications and busiest interfaces; you can also click on an interface name to see its recent traffic and top applications. It is also possible to drilldown from any of the charts to examine the data in more detail; see Working with Charts for more about this.

Devices

While the Network Overview page is useful for quickly identifying the busiest devices and interfaces on your network, the Devices page lists all devices regardless of how busy they are. You can sort the devices by name, address, recent peak traffic rate and recent peak packet rate by clicking the appropriate column header. By default, each peak rate is the highest two-minute rate in the last six hours, but this will be different if the default time range is altered (see Report Settings). Note that the report is refreshed regularly to ensure it is always up-to-date.

21

Page 20 Page 22
Image 21
Page 20 Page 22
Contents NetFlow Tracker Grant of Licence and Payment of Fees Software License AgreementCopyright Customer Remedies Confidential Information and Security User’s Guide version NetFlow Tracker Definitions Support Charges Support ServicesUndertakings by You Supplier’s UndertakingsLimitation of Liability and indemnity Intellectual Property RightsTermination Miscellaneous Confidential Information and SecurityExceptions to Support Services Support HoursResponse Times Contents LONG-TERM Reports Appendix 2 CSV File Format What is NetFlow Tracker? What is NetFlow?Features and Benefits IntroductionUser’s Guide version NetFlow Tracker Pre-installation Checks InstallationMinimum System Requirements Operating System SupportInstallation on Microsoft Windows Installation on Solaris and Linux Post-installation Tasks Set up web front-end security Set up Snmp community stringsConfigure your routers and switches Add listener portsUsing NetFlow Tracker Interfaces Device traffic metersChanging the displayed chart Working with ChartsChart legend Per-AS dataView a standard chart as a tabular report View a standard chart as a pie chartZooming Zooming outWorking with Pie Charts Working with Tabular Reports User’s Guide version NetFlow Tracker Report Templates Address ReportsSession Reports QoS Reports Network ReportsInterface Reports Traffic Identification Reports Creating Filtered ReportsOther Reports Report TemplateSource Data Sample SizeStart Time End TimeIn/Out Interface Out InterfaceVPN Out VPNIdentified Application Recognised ApplicationToS DiffServSource/Destination Subnet Destination SubnetSource Mask Destination MaskDevices and Interfaces Long-term ReportsPer-device and Per-interface Long-term Reports Filter EditorUser’s Guide version NetFlow Tracker Executive Reports Report URL Format General FormReport Format Parameters 0023 Chart0024 0025True NumberFalse HeadingSections Features128 256Time Range Parameters Day HourWeek MonCalendar-based advanced HHmm Applying a time-of-day mask to the time rangeDay1-day2/time1-time2 105 110100 113120 115140 125300 285Minute DailyFilter Parameters Name Port/namePort/number Prec TosPrec%20tos Code ByteAddr/mask Password PasswordSecurity Parameters Management Portal Access Control Parameters SecretNull Aclid specifies a permitted long-term report Features Database Server Settings Performance TuningDisk Speed Query SizeSnmp Settings Configuration GuideLicensing Listener PortsDevice Settings Device SettingsDevice List Archiving Traffic ClassesIdentified Applications Security Settings VPNsDeleting a Device Management Portal Settings Report Settings Saved Filters Long-term ReportsExecutive Reports Span class=repdesctextTest/span Nelements=5 and chartWidth=400 ContentSub-reports User’s Guide version NetFlow Tracker Hostname Resolution Settings IP Application NamesDiffServ Names Database Settings AS NamesSubnet Names User’s Guide version NetFlow Tracker Archiving BackupPerformance Counters Memory SettingsInterface Scans Unprocessed FlowsetsMissed Flows Missed ExportsEnabling Netflow Export on an IOS Device Appendix 1 Device ConfigurationIp cef Ip flow-export destination addressIp flow-cache timeout inactive Ip flow-cache timeout activeShow ip flow export Show ip cache flow Show ip cache verbose flowMls netflow Ip route-cache flow infer-fieldsMls nde sender version Mls aging longUser’s Guide version NetFlow Tracker Set mls nde enable Set mls bridged-flow-statistics enable vlanlistSet system name name Set mls nde addressEnabling Flow Detail Records on a Packeteer Device Flow-sampler-map allflows mode random one-out-of 1 exitEnabling NetFlow on an Enterasys Device Address Using sflowtool to Convert sFlow Records to NetFlowChart CSV format Appendix 2 CSV File FormatTabular report CSV format Appendix 3 Third Party Software Components
Top Page Image Contents