Fluke Recording Equipment manual Memory Settings, Performance Counters

Page 72

User’s Guide – version 3.1.3

NetFlow Tracker

Memory Settings

NetFlow Tracker uses a small amount of memory during its normal operation. You can control this amount by changing the values here, but it is not likely to be necessary. Note that it is possible to prevent the software from working by setting inappropriate values. Note also that this page is not available on Unix installations; to change the memory settings on Unix the “start” script must be edited.

Performance Counters

The performance counters can help diagnose problems setting up NetFlow Tracker. Counters are stored for each device the software has received data from. The counters are kept from when the system is started; you can reset them at any time.

Average sample storage duration

This keeps track of how long it takes the system to store a one-minute sample of real- time data. If this takes more than about fifteen seconds it is a sign that the system is overloaded.

Last long-term database maintenance duration

This is how long it took to perform the last update of the long-term database; if this takes more than two to three hours you may have to reduce the number of long-term reports you have, reduce the number of devices they cover or set some of the long- term sample sizes to zero.

Last real-time database maintenance duration

This is how long it took to perform the last reorganisation of the real-time database; this should not take longer than thirty minutes.

NetFlow Data Received

This counter shows the number of exports and the amount of NetFlow data received by the software from each device. Note that this is not the amount of traffic described by the exports but the LAN traffic generated by the exports themselves.

Traffic Described

This counter keeps track of the total amount of network traffic across all interfaces in each direction described by NetFlow exports received from each device.

Ignored Flows

Flows are ignored if they arrive too late to be processed. If you see a large number of ignored flows you should ensure the inactive timeout or short aging time are correctly set as described in Appendix 1. Some devices do not have a configurable active flow timeout (e.g., Packeteer) and some high-end Cisco routers expose a design flaw in NetFlow that prevents the active flow timeout from being honoured; in these cases you can configure NetFlow Tracker to hold data in RAM for longer to prevent ignored flows - see Database Settings for more information.

72

Page 71 Page 73
Image 72
Page 71 Page 73
Contents NetFlow Tracker Software License Agreement Grant of Licence and Payment of FeesCopyright Customer Remedies Confidential Information and Security User’s Guide version NetFlow Tracker Definitions Support Services Support ChargesUndertakings by You Supplier’s UndertakingsLimitation of Liability and indemnity Intellectual Property RightsTermination Confidential Information and Security MiscellaneousExceptions to Support Services Support HoursResponse Times Contents LONG-TERM Reports Appendix 2 CSV File Format What is NetFlow? What is NetFlow Tracker?Features and Benefits IntroductionUser’s Guide version NetFlow Tracker Installation Pre-installation ChecksMinimum System Requirements Operating System SupportInstallation on Microsoft Windows Installation on Solaris and Linux Post-installation Tasks Set up Snmp community strings Set up web front-end securityConfigure your routers and switches Add listener portsUsing NetFlow Tracker Device traffic meters InterfacesWorking with Charts Changing the displayed chartChart legend Per-AS dataView a standard chart as a pie chart View a standard chart as a tabular reportZooming Zooming outWorking with Pie Charts Working with Tabular Reports User’s Guide version NetFlow Tracker Report Templates Address ReportsSession Reports QoS Reports Network ReportsInterface Reports Creating Filtered Reports Traffic Identification ReportsOther Reports Report TemplateSample Size Source DataStart Time End TimeOut Interface In/Out InterfaceVPN Out VPNRecognised Application Identified ApplicationToS DiffServDestination Subnet Source/Destination SubnetSource Mask Destination MaskLong-term Reports Devices and InterfacesPer-device and Per-interface Long-term Reports Filter EditorUser’s Guide version NetFlow Tracker Executive Reports Report URL Format General FormReport Format Parameters Chart 00230024 0025Number TrueFalse HeadingFeatures Sections128 256Time Range Parameters Hour DayWeek MonCalendar-based advanced HHmm Applying a time-of-day mask to the time rangeDay1-day2/time1-time2 110 105100 113115 120140 125285 300Minute DailyFilter Parameters Name Port/namePort/number Prec TosPrec%20tos Code ByteAddr/mask Password PasswordSecurity Parameters Management Portal Access Control Parameters SecretNull Aclid specifies a permitted long-term report Features Performance Tuning Database Server SettingsDisk Speed Query SizeConfiguration Guide Snmp SettingsLicensing Listener PortsDevice Settings Device SettingsDevice List Archiving Traffic ClassesIdentified Applications Security Settings VPNsDeleting a Device Management Portal Settings Report Settings Saved Filters Long-term ReportsExecutive Reports Span class=repdesctextTest/span Nelements=5 and chartWidth=400 ContentSub-reports User’s Guide version NetFlow Tracker Hostname Resolution Settings IP Application NamesDiffServ Names Database Settings AS NamesSubnet Names User’s Guide version NetFlow Tracker Backup ArchivingMemory Settings Performance CountersUnprocessed Flowsets Interface ScansMissed Flows Missed ExportsAppendix 1 Device Configuration Enabling Netflow Export on an IOS DeviceIp cef Ip flow-export destination addressIp flow-cache timeout active Ip flow-cache timeout inactiveShow ip flow export Show ip cache flow Show ip cache verbose flowIp route-cache flow infer-fields Mls netflowMls nde sender version Mls aging longUser’s Guide version NetFlow Tracker Set mls bridged-flow-statistics enable vlanlist Set mls nde enableSet system name name Set mls nde addressFlow-sampler-map allflows mode random one-out-of 1 exit Enabling Flow Detail Records on a Packeteer DeviceEnabling NetFlow on an Enterasys Device Using sflowtool to Convert sFlow Records to NetFlow AddressChart CSV format Appendix 2 CSV File FormatTabular report CSV format Appendix 3 Third Party Software Components
Top Page Image Contents