Cannot view layer 7 and source/destination data
Greetings, I installed and configure latest Netflow plugin for OpManager and I´m having problems visualizing the traffic by layer 7 and by source/destination. The device is a cisco ASA 5525 (no other devices are forwarding Netflow packets at the moment) and in the NetFlow plugin I can only see the raw trafic (Mbps and total Mb). In application tab reads "No data to display". So the server is receiving the packets. I followed this instructions to enable netflow in ASA: https://supportforums.cisco.com/document/30476/configuring-netflow-asa-asdm
NFA plugin run as NT service
I found a script named na_service in netflow\bin folder, but cannot start sucessfully after register as a windows service, and always show license error in wrapper.log is possible to let nfa plugin run as windows service?
NetFlow Analyzer goes one step ahead in monitoring with packet-level analysis capabilities (Deep Packet Inspection)
ManageEngine NetFlow Analyzer adds Deep Packet Inspection capabilities to troubleshoot application issues faster with the latest build v12.2. Now you can capture network packets from the flow with free tools available in market and analyze them with the help of NetFlow Analyzer's DPI feature. This feature helps you calculate application vs. network response time, application traffic volume details, and user conversation details. The new capturing capabilities in NetFlow Analyzer provide the following
Netflow Analazer high CPU due to Java in Centos server
Hello, Could you please assist me a case of CPU high utilization of Java processes? My server is running CentOS 6.3 and Netflow analyser 9600 Professional. I tried stop and start netflow analyser several times but not solved the issue. I checked by using htop command that the Java processes consume a lot of CPU. May I know what is causing the issue and how to resolve it? I also read some other similar topic but the solution is to update hotfix in Windows server while I am using Centos 6.3. Thank
1-minute detail reports from historic data
how can i pull the 1-minute detail into a report covering 1 month or more? my meta data is there - i can pull this detail but only for 1 day at a time.
Failed to netflow v9 on Cat3850 device.
Hi all, Failed to netflow configuration version 9 on Cat 3850 device. We had configure netflow as below: flow record record1 match ipv4 version match ipv4 tos match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port match interface input collect interface output collect counter bytes long match application name collect counter packets long flow exporter export1 destination 172.31.29.250 export-protocol netflow-v9 transport
Blank page
Hello, When accessing netflow on http://host:8080 i get redirected to /netflow/jspui/NetworkSnapShot.jsp but this page shows nothing. Attached the logzip. Can you help please? Thanks. Regards, kaviraj
Problem at number of conversations that displayed on schedule report (CSV output format)
Hi Every Body I have faced a problem that we couldn’t solve it . when I schedule a conversation report with CSV output format, the maximum number of conversation that was showed (for each of in and out conversation) is 100. But I need full report with all conversation in both category ( in and out ) with CSV output format. For more understanding I attached a schedule conversation report. I inform you my router has more than 4000 conversation and I can see them on conversation page but it couldn’t
unaccounted data on Netflow Pluggin after upgrade to 10250
Hi, I used Opmanager Netflow Plug in build number 10250. When I need to see detail data application in last 15, 30 minutes,1 hours and 6 hours, there's no data (unaccounted data). Is there any configuration to set if I want to see detail data in last 15, 30 minutes and 1 hours ?? regards,
Steps to Enable AVC in Cisco IOS and IOS XE routers using Easy Performance Monitor (“Easy perf-mon” or “ezPM”)
The need for application visibility in the network is on the rise and traditional port-protocol mapping is not enough to get the visibility that they require. Cisco AVC(Application visibility and control) monitoring helps IT teams get that required visibility into the network. ManageEngine NetFlow Analyzer is capable of monitoring Cisco AVC statistics ( NBAR2, ART, URL monitoring, QoS Hierarchy ). We have discussed about the configuration of different AVC parameters on Cisco ASR1k and ISR G2
Interface Names
Hi. I renamed my interfaces from their Ifindex numbers to something a bit more meaningful. I am having trouble reconciling in/out source/destination and think that I may have mucked up my names. Where/how can I find out what the original interface names were before I renamed them? I know what they are on my router: show snmp mib ifmib ifindex Cheers,
How to configure netflow on Cisco NetFlow?
Hi all, How to configure netflow on Cisco NetFlow? We use the 4500 and 6500 series. C4500 Series ip flow ingress ip flow-cache timeout inactive 300 ip flow-cache timeout active 60 ip flow-export source Vlan171 ip flow-export version 5 ip flow-export destination xxx.xxx.xxx.xxx 9996 C6500 Series (flexible netflow) flow record TEST match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port collect counter bytes collect
Cisco WLC applications Unclassified
While evaluating the 11.6 beta of Netflow Analyzer I've run across a problem regarding the WLC netflow integration. I can see data coming in from the specified SSID on the WLC, however the applications remain "Unclassified". Is this function not supported in Netflow Analyzer or have I missed some piece of configuration? The WLC is running code 7.4.121.0.
Netflow Analyzer Plugin Update hangs
I have am running OpManager build 11500 with the Netflow Plugin build 9900. I am trying to update the Netflow plugin to build 10250 but the Update Manager just seems to stall. I have attached a screen snip of where it hangs. The UpdateManager for OpManager does not have an issues updating OpManager, it is just the Netflow Analyzer UpdateManager that has a problem. Does anyone know what I can do to try an troubleshoot the install process?
How to uninstall NetFlow 11
Hello, I would like to know how to uninstall NetFlow 11. I tried uninstalling it but it did not uninstall successfully. The install cleanup tool does not work. Do you have new version of Clean up tool?
Monitoring Domains
Good afternoon, I have the following questions : • Public IP's Group to meet consumption in certain Internet sites. • Monitoring by domino ( google.con , Facebook.com , etc. ) . • Analysis of traffic through a proxy. Thank you.
Testing Netflow installation
Hi everyone, bit of a noob question or two. I had NFA installed on my local computer for testing and crashed it recently. I have installed a newer version of NFA on a server and reconfigured my router to send data to it, however.... 1. when I attempt to add my router to the inventory/dashboard I am told that it already exists (I did add it earlier however wasn't convinced that I have set it up correctly - now I can't find it to edit it) 2. how do I test that NFA is accepting data. I can telnet
Netflow Analyzer Service stops and wont start
Tried starting the service but it stops after a few seconds.
Cisco 6807 , Cisco 6880 and new devices with new MIB or not well known
Hi , I have a Netflow Analyzer distributed version , I'm trying to add flows that come from two new Cisco Devices Catalyst 6807 and Catalyst 6880 . I configured netflow on device and also snmp but netflow see only one interface with ifindex1 and when I use snmp discover tool with right read community nothing happen. I used the same configuration of Nexus 7010 that instead works fine. I possible that I need to add some new MIB in Netflow Analyzer? , if yes where ?
NetFlow Install error
Hi after installing netflow plug-in on opmanager and i try to open it, i receive that erro on my browser under opmanager taskbar: There was an error connecting to rm - opmanager : 8080 . SSL received a packet that exceeds the maximum allowable size . ( Error code : SSL_ERROR_RX_RECORD_TOO_LONG ) i've also enabled ssl with running command ssl_gen.bat Thanks Leo
how to upgrade and migrate netflow analizer 9500
Hello! I have the following settings in the NetFlow Analyzer server Version: 9.5 Build Number: 9500 License Information: Professional Plus - Unlimited Interfaces Database used: MYSQL OS: Centos June 64 bits I need to migrate to another host and also update the version of NetFlow Analyzer. Please tell me what I have to do to backup and restore in the new version.
After upgrade from 9900 to 10250 java error
Hi Folks, I am getting an error when trying to start netflowanalyzer after upgrading. it says. Error occured during initialataion of VM, Java/lang/unsupportedClassVersionError: java/lang/object : unsupported major.minor version 51.0 i did copy in the java update file as part of the upgrade. thanks
Migrating Servers
hi, I am using NFA build 9100. I we experiencing a very slow response from NFA and we would like to start things over to a new server. Our database size today is ~250Gb. Also, we would like to upgrade to a more recent stable version of NFA, the last one is 9.9? maybe go to 9.8. How do I safely backup all database entries and configurations and migrate to another build in another server?
Unknown Application Port Protocol
Hello, i am using NFA Version: 9.8.5 with Cisco ASR 1002 router and FNF v9. On picture above there is record for Dst IP address in IP Group. It shows Application: Unknown_App, Port:* and Protocol:Unknown. When i look for same IP address directly on interface not IP Group this time, i got this report below. There is still Application: Unknown_App but this time i can see Port and Protocol information. It is record for same Src IP and Dst IP, but first picture show IP Group view and second one show
replicate netflow to 2nd analyzer ?
Can I export a copy of netflow raw data to our SOC through existing netflow analyzer (9.8.6)? Bear Chen
NetFlow does not start
Hello, We were running NetFlow on UbuntuLinux for several months, but last weekend there was a power outage and the server was unexpected shutdown. The power issue was fixed and now the NetFlowAnalyzer is not starting with the error below: "Running ManageEngine NetFlow Analyzer... wrapper | --> Wrapper Started as Console wrapper | Java Service Wrapper Professional Edition 64-bit 3.5.15 wrapper | Copyright (C) 1999-2012 Tanuki Software, Ltd. All Rights Reserved. wrapper | http://wrapper.tanukisoftware.com
Ubiquiti EdgeMax analyzer config issue
Hello all, I have netflow analyzer installed on a windows box trying to monitor a Ubiquiti Edgemax EdgeOS Lite router, Set recommended settings using the command line interface in the router ( Port 2055, setting the wan interface to monitor, and forwarding to the static IP of the monitoring computer, as well as the other recommended settings). The problem seems to be the netflow analyzer program installed on the computer, there are no matching devices to set in the device options, the program seems
Socket Time out while fetching the database instances from host
I'm in the process of migrating Netflow Analyzer version 9 build 9600 from a Windows Server 2003 to another server running Server 2012. I have a fresh install of Netflow Analyzer on the new server with the same version and build number. I'm also migrating my MSSQL database from SQL 2005 to SQL 2012. I'm following the guide linked below to switch from MySQL to MSSQL Database and getting an error when running changeDBServer.bat and trying to list available SQL Server instances on another server. https://www.manageengine.com/products/netflow/mysql-to-mssql.html
API use sample ?
Hi Nobody would have an example of using the built- in API Netflow ? I am search to access at one device into "Inventory" and display Trafic/Interface/Application/Echanges into my intranet portal. regards Olivier
NFA Licensing Questions
Hello NetFlow Community! Can anyone confirm: - If a single interface license is free'd up if it is set to 'unmanaged' in NFA? - Does NFA behave any differently if an interface has been set to 'unmanaged' and NetFlow is still enabled on it? - If it's possible to monitor the ingress/egress traffic on a switch/router where 2 interfaces exist, but only 1 is set to 'managed'? - If NFA interface licenses have to be purchased for Cisco routers/switches considering that NetFlow is a proprietary network
Netflow ANalyzer 9 Performance
Hello, Today in the company where I work we are monitoring 79 interfaces with NA 9. But it takes a long time to load all graphs, it takes a long time even to access the web interface of NA 9. I have access to the server running Netflow, I wonder if there are some first steps to check performance, see CPU usage, RAM, porcesses and so on. Thanks in advance.
Large number of new interfaces
Hi all I've got an older install of netflow analyzer (9.8 build 9800) that has been trucking along just fine until recently. For some reason it is reporting 1000s new interfaces for routers that dont have 1000s of interfaces. The highest is 56179 new interfaces for one router. The only routers that were impacted were Mikrotik, the cisco ones are fine. When I go into license management the console is very slow to respond. If I select the device (which selects all the interfaces below) and hit delete
NetFlow Analyzer now supports Cisco WLC monitoring
ManageEngine NetFlow Analyzer adds Cisco WLAN Controllers to its list of devices with the latest build v12. It also provides enhancements to various features such as IP group, interface group and alert profile. Get an view of real-time traffic statistics from wireless devices and drill down further with graphical reports and know traffic patterns across SSIDs, access points and controllers. Dashboard view gives a list of top 10 details to get an overall view of entire wireless networks Get traffic
Message "There is no result to display" on interfaces
When checking saturated interfaces in Netflow, I'm not able to see the input/output flow for two hours or less, sometimes the information displays for any time frame (6 hours, two hours, half an hour, etc.), but sometimes it doesn't. I'm attaching the capture of an example and the second one, for the raw data settings . Please advice on what is missing or what should be fixed. Thanks a lot!
Netflow device accidentally deleted
As I was getting familiar with the creation and management of the Netflow add-on, I deleted a particular device. It was gone, and I was comfortable with that. Although.. Now that I know what i'm supposed to be doing (!!) I need that device to come back. :| I have tried suggestions of stopping netflow from the device and adding it back on, I have also changed the source port on the device, so it would report it as another device. To my attempts, I have no success story to brag about!! It's still
NetFlow Analyzer Upgrade error from Version9700 to version 9.8 build 9860
Hi, I am getting Upgrading error, while upgrade from v 9.7 build to ver 9.8 build 9860. Netflow Analyzer server crashed, So I am configuring it from the scratch, I wan to Upgrade it to the latest service pack. From the Update Manager. below patch installed successfully NETFLOW_9.6_SP_1.0(NETFLOWPATCH 1.0) - Successfully installed. While upgrading - AdventNet_ManageEngine_NetFlow_Analyzer_9_8_1_SP-1_0.ppm, I am getting the following error as Error While updating files Uninstallation completed.
Netflow Analyzer Reporting
Hi, In Netflow Analyzer when I create one month report, software draw the graph based on hourly average and again calculate 95percentile based on hourly average, in this way 95percentile wont be calculated accurately, Other netflow software such as PRTG, have the option to generate report for any period of time with another option to define time window (1,5,15... mins) to calculate average and draw graphs and option to define timewindow(1,5,15... mins) for claculating 95percentile. is there any
Export database from version 9.7 to version 11
Hello, We have a Netflow Analizer running with version 9.7. We have just installed the v11 version on another machine and we want to export all data and configuration from one to another, is that possible? Thank you, Regards, Sistemas telecomunicaciones - Abanca
Traffic unaccounted of One hour , 30 minuts an 15 minuts , the reports not graphic show in aplication, source , destination, etc
My last upgrade is 9.9.0 and compilation 9900 Licence Enterprise I don't have HighPerf Reporting Engine Data Base Postresql I have problem of reports from much time Your support pls,
After delete, cannot add, shows already deleted
Hi, I click unmange and delete the device (Cisco). I want to add it again, I noticed that the IP of device i was not delted. Okay, i turned off the nflow agent on device restarted the nflow service. Still Cisco IP appears on the selecttion of available device. Reinstall agent. Add Cisco, okay bind the device IP but on the main dashboard, Already deleted ? It also doesnt show onthe add interface and license management. How do I Re-Add the device upon deletion. Many Thanks
Next Page