Fluke Recording Equipment manual Creating Filtered Reports, Traffic Identification Reports

Page 30

User’s Guide – version 3.1.3

NetFlow Tracker

VPNs – shows the VPNs with most traffic or packets. Interfaces must be associated with VPNs in Device Settings for this report to function.

Next Hops – shows the next-hop addresses that received most traffic or packets. Note that only a router can supply a next-hop address.

Traffic Identification Reports

Identified Applications – shows the identified applications with most traffic or packets. See Device Settings for more information.

Traffic Classes – shows the traffic classes that with most traffic or packets; see Device Settings for more.

Other Reports

Total – shows just the total traffic and packets passing the filter.

Creating Filtered Reports

NetFlow Tracker allows any chart or tabular report to be created using a powerful dialog called the filter editor. To create a filtered report, click on “Filter Editor” on the main page.

Most of the options in the filter editor are initially hidden to save space and bandwidth; you can add a filter to the page by selecting it and clicking “Add”.

Each filter allows you to specify a restriction on the source data considered for the report; if a filter is not specified it will not impose any restriction. You can choose to include or exclude the items you select.

There are several ways to select items, depending on the type of the filter. Named items can be selected by highlighting them in the left-hand “Available” box and using the “>” button to move them to the right-hand “Selected” box. To deselect items highlight them in the right-hand box and click “<”.

Some filters additionally allow you to manually enter an item in a box above the selected box and click “Add”; to deselect an item added in this way click “<” as before. If a filter does not have any named items there is a single selected box and a “Remove” button.

Some filters allow a range of items to be added; in this case enter the start and end of the range in the boxes provided. To select a single item, leave the right-hand box empty,

If you are logged in as an administrator or not logged in you can save a filter by clicking “Save…” at the bottom of the page. This allows you to assign a name to a set of filters for re-use later. If you have any saved filters defined they are available in the same dropdown list used to add filters to the page. Saved Filters are managed in Report Settings.

Report Template

You can choose the type of element you wish to report here, and specify whether you want to create a tabular report, chart or pie chart. For more about the different types of report, see Report Templates above.

30

Image 30
Contents NetFlow Tracker Software License Agreement Grant of Licence and Payment of FeesCopyright Customer Remedies Confidential Information and Security User’s Guide version NetFlow Tracker Definitions Undertakings by You Support ServicesSupport Charges Supplier’s UndertakingsLimitation of Liability and indemnity Intellectual Property RightsTermination Confidential Information and Security MiscellaneousExceptions to Support Services Support HoursResponse Times Contents LONG-TERM Reports Appendix 2 CSV File Format Features and Benefits What is NetFlow?What is NetFlow Tracker? IntroductionUser’s Guide version NetFlow Tracker Minimum System Requirements InstallationPre-installation Checks Operating System SupportInstallation on Microsoft Windows Installation on Solaris and Linux Post-installation Tasks Configure your routers and switches Set up Snmp community stringsSet up web front-end security Add listener portsUsing NetFlow Tracker Device traffic meters InterfacesChart legend Working with ChartsChanging the displayed chart Per-AS dataZooming View a standard chart as a pie chartView a standard chart as a tabular report Zooming outWorking with Pie Charts Working with Tabular Reports User’s Guide version NetFlow Tracker Report Templates Address ReportsSession Reports QoS Reports Network ReportsInterface Reports Other Reports Creating Filtered ReportsTraffic Identification Reports Report TemplateStart Time Sample SizeSource Data End TimeVPN Out InterfaceIn/Out Interface Out VPNToS Recognised ApplicationIdentified Application DiffServSource Mask Destination SubnetSource/Destination Subnet Destination MaskPer-device and Per-interface Long-term Reports Long-term ReportsDevices and Interfaces Filter EditorUser’s Guide version NetFlow Tracker Executive Reports Report URL Format General FormReport Format Parameters 0024 Chart0023 0025False NumberTrue Heading128 FeaturesSections 256Time Range Parameters Week HourDay MonCalendar-based advanced HHmm Applying a time-of-day mask to the time rangeDay1-day2/time1-time2 100 110105 113140 115120 125Minute 285300 DailyFilter Parameters Name Port/namePort/number Prec TosPrec%20tos Code ByteAddr/mask Password PasswordSecurity Parameters Management Portal Access Control Parameters SecretNull Aclid specifies a permitted long-term report Features Disk Speed Performance TuningDatabase Server Settings Query SizeLicensing Configuration GuideSnmp Settings Listener PortsDevice Settings Device SettingsDevice List Archiving Traffic ClassesIdentified Applications Security Settings VPNsDeleting a Device Management Portal Settings Report Settings Saved Filters Long-term ReportsExecutive Reports Span class=repdesctextTest/span Nelements=5 and chartWidth=400 ContentSub-reports User’s Guide version NetFlow Tracker Hostname Resolution Settings IP Application NamesDiffServ Names Database Settings AS NamesSubnet Names User’s Guide version NetFlow Tracker Backup ArchivingMemory Settings Performance CountersMissed Flows Unprocessed FlowsetsInterface Scans Missed ExportsIp cef Appendix 1 Device ConfigurationEnabling Netflow Export on an IOS Device Ip flow-export destination addressShow ip flow export Ip flow-cache timeout activeIp flow-cache timeout inactive Show ip cache flow Show ip cache verbose flowMls nde sender version Ip route-cache flow infer-fieldsMls netflow Mls aging longUser’s Guide version NetFlow Tracker Set system name name Set mls bridged-flow-statistics enable vlanlistSet mls nde enable Set mls nde addressFlow-sampler-map allflows mode random one-out-of 1 exit Enabling Flow Detail Records on a Packeteer DeviceEnabling NetFlow on an Enterasys Device Using sflowtool to Convert sFlow Records to NetFlow AddressChart CSV format Appendix 2 CSV File FormatTabular report CSV format Appendix 3 Third Party Software Components