Fluke Recording Equipment In/Out Interface, Vpn, Out VPN, Source Address, Destination Address

Page 32

User’s Guide – version 3.1.3

NetFlow Tracker

Out Interface

The out interface filter restricts a report to just outbound traffic from a set of interfaces. Used in combination with an in interface filter it will report on traffic that took a particular path through a router.

In/Out Interface

The in/out interface filter restricts the report to bi-directional traffic for the selected interfaces.

In VPN

The in VPN filter restricts a report to just traffic where the inbound interface is part of the selected VPN(s). Interfaces must be associated with VPNs in Device Settings for this filter to function.

Out VPN

The out VPN filter selected traffic where the outbound interface is part of the selected VPN(s).

VPN

The VPN filter selects traffic where either interface is part of the selected VPN(s).

Source Address

You can restrict the report to traffic with a given source IP address or one of a set of source IP addresses. Type the address or domain in the box and click “Add”. If you type a domain name, all addresses resolved for that domain are added to the filter.

Destination Address

The destination address filter will report on data with one of a set of destination IP addresses.

Source/Destination Address

This filter will consider traffic either originating from or destined for the given addresses.

Protocol

You can restrict the set of IP protocols considered. For example, you may want to consider only UDP or ICMP traffic while investigating a denial-of-service attack.

Source Application

The source application filter restricts the IP protocol and source application port number. You can enter a port number and protocol manually or you can select from the configured in the IP Application Names settings page.

Destination Application

This restricts the protocol and destination application port, selectable by name.

Source/Destination Application

This filter considers traffic using the given application as either the source or destination.

32

Image 32

Contents NetFlow Tracker Software License Agreement Grant of Licence and Payment of FeesCopyright Customer Remedies Confidential Information and Security User’s Guide version NetFlow Tracker Definitions Support Services Support ChargesUndertakings by You Supplier’s UndertakingsTermination Limitation of Liability and indemnityIntellectual Property Rights Confidential Information and Security MiscellaneousResponse Times Exceptions to Support ServicesSupport Hours Contents LONG-TERM Reports Appendix 2 CSV File Format What is NetFlow? What is NetFlow Tracker?Features and Benefits IntroductionUser’s Guide version NetFlow Tracker Installation Pre-installation ChecksMinimum System Requirements Operating System SupportInstallation on Microsoft Windows Installation on Solaris and Linux Post-installation Tasks Set up Snmp community strings Set up web front-end securityConfigure your routers and switches Add listener portsUsing NetFlow Tracker Device traffic meters InterfacesWorking with Charts Changing the displayed chartChart legend Per-AS dataView a standard chart as a pie chart View a standard chart as a tabular reportZooming Zooming outWorking with Pie Charts Working with Tabular Reports User’s Guide version NetFlow Tracker Session Reports Report TemplatesAddress Reports Interface Reports QoS ReportsNetwork Reports Creating Filtered Reports Traffic Identification ReportsOther Reports Report TemplateSample Size Source DataStart Time End TimeOut Interface In/Out InterfaceVPN Out VPNRecognised Application Identified ApplicationToS DiffServDestination Subnet Source/Destination SubnetSource Mask Destination MaskLong-term Reports Devices and InterfacesPer-device and Per-interface Long-term Reports Filter EditorUser’s Guide version NetFlow Tracker Executive Reports Report Format Parameters Report URL FormatGeneral Form Chart 00230024 0025Number TrueFalse HeadingFeatures Sections128 256Time Range Parameters Hour DayWeek MonCalendar-based advanced Day1-day2/time1-time2 HHmmApplying a time-of-day mask to the time range 110 105100 113115 120140 125285 300Minute DailyFilter Parameters Port/number NamePort/name Prec%20tos PrecTos Addr/mask CodeByte Security Parameters PasswordPassword Null Management Portal Access Control ParametersSecret Aclid specifies a permitted long-term report Features Performance Tuning Database Server SettingsDisk Speed Query SizeConfiguration Guide Snmp SettingsLicensing Listener PortsDevice List Device SettingsDevice Settings Identified Applications ArchivingTraffic Classes Deleting a Device Security SettingsVPNs Management Portal Settings Report Settings Executive Reports Saved FiltersLong-term Reports Span class=repdesctextTest/span Sub-reports Nelements=5 and chartWidth=400Content User’s Guide version NetFlow Tracker DiffServ Names Hostname Resolution SettingsIP Application Names Subnet Names Database SettingsAS Names User’s Guide version NetFlow Tracker Backup ArchivingMemory Settings Performance CountersUnprocessed Flowsets Interface ScansMissed Flows Missed ExportsAppendix 1 Device Configuration Enabling Netflow Export on an IOS DeviceIp cef Ip flow-export destination addressIp flow-cache timeout active Ip flow-cache timeout inactiveShow ip flow export Show ip cache flow Show ip cache verbose flowIp route-cache flow infer-fields Mls netflowMls nde sender version Mls aging longUser’s Guide version NetFlow Tracker Set mls bridged-flow-statistics enable vlanlist Set mls nde enableSet system name name Set mls nde addressFlow-sampler-map allflows mode random one-out-of 1 exit Enabling Flow Detail Records on a Packeteer DeviceEnabling NetFlow on an Enterasys Device Using sflowtool to Convert sFlow Records to NetFlow AddressTabular report CSV format Chart CSV formatAppendix 2 CSV File Format Appendix 3 Third Party Software Components