NetFlow 11 Accuracy Discrepancy
Hi - Im using NetFlow 11.0 with Cisco ASA5510 9.1.5.12 for our NetFlow analysis (NSEL). I understand the statefull operation and behavior of the ASA, but what is interesting is the traffic counters doesnt match up. If I search for all the captures under the forensics section this add's up to to volume of data consumbed, if I look under the report section or dashboard the data sumed for the same destination doesn't sum up, its allot more than what the forensics raw section report on. This means the
Does NetFlow Analyzer support IPFIX BIFLOW
Hi, I am using the evaluation version of Network Analyzer. I have a router from which, I am exporting IPFIX flows. Template for Biflow, flowStartSeconds flowStartSecond + PEN flowEndSeconds flowEndSeconds + PEN IP_SRC_ADDR IP_DST_ADDR L4_SRC_PORT L4_DST_PORT PROTOCOL biflowDirection PACKETS_TOTAL PACKETS_TOTAL + PEN BYTES_TOTAL BYTES_TOTAL + PEN Network Analyzer doesn't seem to decode the fields properly and Bi direction information is lost. Thanks Rahul
Network Analyzer doesnt decode IPFIX Total Packets/Bytes properly
Hi, I am exporting IPFIX flows from a router. Template used for exporting flows, flowStartSeconds flowEndSeconds IP_SRC_ADDR IP_DST_ADDR L4_SRC_PORT L4_DST_PORT PROTOCOL PACKETS_TOTAL BYTES_TOTAL For active flows, with every flow export, analyzer seems to sum up the counters. For example, lets say active timeout is 2 mins. Export 1 : Total Packets = 100 (at 2) Export 2: Total Packets = 150 (at 4) Analyzer shows total packets for the flow to be 250, which is incorrect. Its supposed to be 150.
NetFlow v.9 on Catalyst 6500
Hi, we're trying to get NetFlow v.9 data from a Catalyst 6500 to our NetFlow Analyser Pro Vesion 7.5 Build 7600. It comes up with the correct Interface and all the values are too low. For example if I run sh interface gi1/2 I can see that it has a mean value of about 1,5Mb the last 5 minutes, but in he Analyzer it has never went over 6Kb today and it's laying pretty stable on about 4Kb. Should be nice if somone could give us some pointers!
Configuration Netflow on cisco 4500-X (cat4500e-universalk9.SPA.03.07.00.E.152-3.E)
Hello I have a pair of new Netflow 4500-X that i want to add to the Netflow Analyser (i have yet an ASA and it's working well). I configure the 4500X as follow : flow record NF-RECORD match ipv4 tos match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port collect interface input collect interface output collect counter bytes collect counter packets collect timestamp sys-uptime first collect timestamp sys-uptime
why Collector always down ?
I have some problem in my collector. My collector status always down after 5-10 minutes. I have checked for the service, and service always 'started'. I try to restart the service and after restart my collector up again but just for 5-10 minutes and after that down again.
Collector always down
I am running ManageEngine NetFlow Analyzer Enterprise Edition v 7.7.0. I have some problem in my collector. My collector status always down after 5-10 minutes. I have checked for the service, and service always 'started'. I try to restart the service and after restart my collector up again but just for 5-10 minutes and after thar down again. Thank You, Dimas
Cant start Netflow service
Hi I am in the process of evaluating netflow service for a customer But cant start the service the error I get is java.lang.UnsatisfiedLinkError: no AdventnetOper_64 in java.library.path at java.lang.ClassLoader.loadLibrary(Unknown Source) at java.lang.Runtime.loadLibrary0(Unknown Source) at java.lang.System.loadLibrary(Unknown Source) at com.adventnet.tools.prevalent.ROperation.<clinit>(ROperation.java:50) at com.adventnet.tools.prevalent.Validation.doValidation(Validation.java
How to best use the Security Analytics module
Hi I find that the Security Analytics module provides so much information that is is very difficult to identify a legitimate attack. I would like the software to be able to alert admins to a threat, but with this many "threats" being detected, I can't see how this information could possibly be used to resolve an issue. How do you best use the ASAM module to identify legitimate threats, and be alerted to them. Thanks Robert.
Cant start the service
Hi all My name is Reza I have problem with Netflow Analyzer 9 I cant start the service and the error is like this the ManageEnginee Netflow Analyzer 9 service on local computer started and then stopped. Some service stop automaticlly if they are not in use by other service or programs What should i do to solve this issue Thanks
Netflow - Windows - run.bat freezes at Connect to : [http://localhost:8081]
Hi, I download Netflow onto my PC to test, however I am not able to get it to work. When trying to start Netflow Analyzer, the server does not start. So I did a run.bat from the \bin folder and it freezes at: Server start in :: [30011 ms] Connect to : [http://localhost:8081] Am i missing something. Any help would be appreciated. KM11
update
Hello team I have a problem with netflow 9.6 builf 9600 I need to upgrade NFA 9.6 to 9.7 but I get the following error: ( what is the problem)
Download Netflow Analyzer 9600 for Windows 2012
Good Afternoon, Where do I get to download the version of Netflow Analyzer Build 9600 for Windows 2012? Thank you... Igor Luz
netflow not responding
hi, recently i have installed netflow analyzer on a windows 2008 R2 server in my company. I used netflow version 5 to sample my 7200 cisco router, and everything worked fine, until i tried to change it to version 9... the analyzer stopped responding and doesn't process the flow that are received, even when i go back to version 5 configs... on wireshark i can see that the flows are receivedon the server... what could be the problem? thanks, Dan
NBAR2 APP is showing not data found
I am evaluation net flow analyzer. But NBAR2App of an interface showing no data found But Layer7 App(AVC) showing data Any suggestion anyone ?
why is Netflow analyzer listening on port 22?
Hi, we noticed that the java process that is responsible for Netflow analyzer 11 is listening on many ports, including TCP 22. When we telnet on it we receive the message "SSH-2.0-Network ConfigManager SCP Server". 1. Is there any reason it should be started? 2. If it is not needed, how can we disable it? Regards, Borut
how can i access the database of netflow v9.9 (POSTGRES)
Dear all, I would like to know how can I access the database of netflow v9.9 Note that the database type used is POSTGRES. Regards,
Port 49154
HI I have installed OpManager NetFlow for a client, which makes me a query and the I relay you for your support, I have a very strong traffic between 2 servers and server on port source is 49154 and I wonder if this port has relationship with the solution Manage Engine image : https://forums.manageengine.com/viewImage.do?fileId=49000006255225&forumGroupId=49000000002007
download NCM add on.
hi, I'm a student doing a masters in networking. for my research i'm planning to do about net flow.so i need NCM add on to be installed.does any one know a way to get it? thanks a lot.
net flow
Buongiorno ho scaricato opmanger in prova ,avrei bisogno di abilitare netflow sul firewall ? dalla schermata mi chiede indirizzo ip firewall ,ma non me lo "aggancia" ? Devo attivare altro ?
[RESOLVED] - v10.5.2 - Only traffic data shows -- no application, source, destination data show "unaccounted data"
When I go to the Application, Source, Destination, etc tabs, they all show everything as "unaccounted data". This is on a fresh install of v10.2.0 (which had the problem), upgraded to v10.2.5 and I still have the problem. Server runs on Windows 2008 R2 and database is Microsoft SQL 2014 Express Edition. Traffic tab seems to work just fine.
why? not seen sFlow
How do I enable "sFlow"? sniffer seen that the data sFlow sent to the server NetFlow Analyze side, but not visible in the program.
why? start PostgresSQL server failed
I installed the program on ubuntu 14.04 in the performance of sh run.sh message Check webServerPort http value: 8080 https Port: null PortCheckerUtil.getPort: serviceName: NETFLOW_LISTENER_PORT Flag: true NFAPropFile: / opt / ManageEngine / NetFlow / bin /../ conf / netflow / nfa.properties PortValue is: 9999 Check for NetFlow Port with value: 9999 PortCheckerUtil.checkPorts: 9999 Starting Server from location: / opt / ManageEngine / NetFlow This evaluation copy is valid for 29 days Trying to start
Free up disk space on Netflow Analyzer
Hi All, I was wondering if it was possible to prune historical data in Netflow Professional? We had an issue where the server hosting Netflow ran out of space yesterday, I added an extra 5 gig to the drive but today Netflow decided to use up the extra 5 gig. I've read other posts where its possible to set a retain data value by going to 'Product Settings --> Storage Settings' but i'm not seeing Product Settings anywhere in our Netflow.
A new interface each day for the PPPoE connection
Hi, I'm using the free 10 interfaces version of NetFlow Analyzer to monitor my home network (Ubiquity Edgerouter Pro). The router will give 3 interfaces by default when I check it with SNMP (set to "IfNames"): - eth0 - eth1 - pppoe0 Unfortunately my ISP does a forced reconnection every 24 hours (even with my business VDSL connection with a fixed IP) which I've forced into the night using a reconnection script. With each reconnection the PPPoE interface got a new index, but it's keeping its name.
evaluation license
Hi, My evaluation license will expire soon, I will buy the essential license but not yet purchased It's possible to have another one license ? Thanks in advance Version 10.2.0 Build Number 10200 License Info Essential-Unlimited Interface License Type Trial Expires On 2015-2-26 Licensed to Evaluation User Database Used POSTGRES Interfaces Managed 25 AMS Expires On 2015-2-26
Netflow Analyzer won't update since OpManager migration to MSSQL
We moved our OpManager and Netflow Analyzer to a new server a few months back and when I moved this, I migrated OpManager to MSSQL. Even since then I can run updates on OpManager but when I try to update Netflow, it just sits there. I open the UpdateManager and point the correct ppm file and click Install and it just sits there forever. Netflow runs just fine but I can't update it all. The only thing I can think of is changing OpManager over to MSSQL. Any ideas? Thanks
10.0 Release
Hey guys Does anyone know when the netflow analyzer 10.0 release is due? We are really anticipating the API integration so we can pull some graphs into our portal. Regards, Matt
Source and Destination showing 0.0.0.0
I setup all my firewalls to send netflow data to Netflow Analyzer running on CentOS 6.5 last night. Everything was reporting correctly when I logged off last night, but when I looked today the source and destination fields showed all traffic with 0.0.0.0 in the source and destination. Below I pasted the netflow relevant configs and versions. I am currently using a trial version, but if this gets resolved we will be purchasing a license. flow-export destination inside 10.10.10.25 9996 flow-export
AVC in NFA report
Hi, everybody. May be somebody knows how to add avc statistics in a sheduled report? Is it possible?
Share Dashboards with other users
Hello, Is there a way to share my personal dashboards with other users of our netflow analyzer environment? This way we could create the dashboard once and distribute it to other users, so they would not have to create the same dashboards by themselves again. any help appreciated. Cheers, Claudio
Alert profile cuts off mail address
Hello guys, we have purchased NetFlow and I have a strange phenomenon. Whenever I enter a mail-address containing a dash, Netflow Analyzer cuts off this mail-address!! E.g. I want some mails to be send to zoho@test-test.de and enter this mail as the desired one to send alerts to. As soon as I apply the change, return back to edit this alert profile, the address Looks like: zoho@test I tried the same with zo-ho@test.de to have proof. In this case the address it cut off and remains as "zo". Any suggestions?
Invalid License File
Hi Netflow Analyzer Support Team One week ago my netflow analyzer server work normally just like usual But on the early morning, the server stops collecting data I check my server and I realize the server storage is full I shut down the service and when I am starting the service, the service does not start I open the wrapper.log and i get message invalid license file, Error code 535 and 501 What step should i do to fix the problem? I hope I can found the solution here Thank you very much for the
Share a dashboard with other users in netflow analyzer
Hello, is there a way to share a newly created dashboard with other users, so they don't need to create the same dashboard again in their profile? any help appreciated ... Cheers, Claudio
NETFLOW error
Hello Team I have netf 9500 ( testing) You Know What this is Error ??
Juniper switch interfaces ifindex value
Hi, I have a problem about identifying the interface names of Juniper 5200 switch on NFA 9. When I check the switch config, it says ge-0/0.0 ge-0/1.0 etc. but their ifindex values are 522, 512, 312 etc. So how can I know which interfaces these values belong to? Do I have to check it from the switch console?
ip address change and device probe disappear
Hi, I use NFA 10.2 (below details), I have changed the ip address of a switch probe (juniper EX4200) and after the change, It doesn't appear on the inventory and in the license management also I have tried to remove the device with this old ip address and also a complete fresh reinstallation (remove /opt/Managenegine before) I have 3 probe on this collector including the failed one, the two other are working correctly after the fresh reinstall but no effect, I can see on the logs this for the failed
Unable to get AVC Working
Using this configuration on a 2911 ISR G2 router. Licence dataK9 active. performance monitor context my-avc profile application-experience exporter destination 10.128.1.114 source GigabitEthernet 0/0 transport udp port 9996 traffic-monitor all Then apply the profile to your interfaces. Interface Gi0/0/1 performance monitor context my-avc With Version 10.2 ManageEngine Netflow in my testbed.
Source and Destination not show
Hello, I have a OpManager installed with SQL Server and also have Netflow, but it is plugin licensing. The NetFlow was installed and pointed to the SQL Server, but even after all set up is not displayed's IP source and destination and also not shown the protocols / ports used. Is there anything else to be configured? The only support option would be through this site? Thank You
NetFlow Ubuntu 32-bit Installation Problem
I have just finished installing the NetFlow Analyzer demo on an Ubuntu 32-bit server for evaluation. The install went fine from the command line but when I try and run run.sh I get the output that is quoted below. I tried running as the logged in user as well as root. The app was installed as the regular user. Also of note, I changed the ports during installation. Web port is 1257 and netflow port I changed to 2055. JAVA_HOME : /home/administrator/ManageEngine/NetFlow/bin/../jre SERVER_HOME :
Next Page