ASA NSEL "deny" flows in Netflow Analyzer
Hi, Are there any option to view in NetFlow Analyzer flows generated by NSEL "Deny" events (Event_ID=3)? It is crucial for my prospective customer . To test this funcionality, we have termporary changed ASA config to register only deny flows: policy-map global-policy class netflow-traffic flow-export event-type flow-denied destination NFA After change I don't see any statistics in Netflow Analyzer from ASA I also checked raw data table in MySQL and found only Event_ID = (0, 1 or 2) (generated
NetFlow Central Server mysql tuning - 2
Hello Praveen, following https://forums.manageengine.com/#Topic/49000005464578 I cannot see my reply or comment, I could have posted questions 3 times :) Have you received my further questions? - I have a Central Server with 24 GB, which is the right mysqlConf_XXGB.txt to use? Is it good that with 16GB settings? - wrapper.conf for Central Server and Collector contains the following: # Maximum Java Heap Size (in MB) # For 1GB RAM machine wrapper.java.maxmemory=1024
NetFlow Central Server mysql tuning
Hello ManageEngine Community, I have just installed the following NetFlow systems: Current Version : 7.7.0 CentOS 6.2 x86_64 Central Server 24GB CentOS 5.5 x86_64 Collector CentOS 5.5 i386 Collector Sometimes mysqld gets disconnected with errors like the following: InnoDB: Error number 11 means 'Resource temporarily unavailable'. InnoDB: Some operating system error numbers are described at InnoDB: http://dev.mysql.com/doc/refman/5.0/en/operating-system-error-codes.html InnoDB: Could not open or
netflow and radius on win 2008 nps
Hi i wouldl like authorize admin users by nps win 2008 radius. i saw this: https://blogs.manageengine.com/netflowanalyzer/2010/01/12/secure-access-to-netflow-analyzer-radius-server-authentication but i don't know how to setup windows radius, i have there some policies for authentication network devices but how to setup it for netflow when it's running on port 8088? br wananabenetflowmasata:)
Contest from NetFlow Analyzer TAC
Click here to go to our Facebook page
Support of Cisco Netflow-lite on netflow analyzer 9.5
Dear all, Is the latest manageengine netflow analyzer 9.5 supports Cisco's Netflow-lite on Catalyst 4948E? http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.2/15.02SG/configuration/guide/nswich_l.pdf We tried to setup netflow-lite on a Catalyst 4948E with 15.0 IP services IOS, the netflow analyzer is a trial version 9.5 running on Windows. The analyzer can receive netflow data (we use wireshark to prove this) but the analyzer cannot display statistics netflow-lite exporter poc1 transport
fprobe with ME NetFlow Analyzer EE 7.7
Hello- Anyone here with fprobe successfully sending flows to NetFlow Analyzer EE 7.7? It used to work just fine with the Professional edition (7.5), but with EE 7.7 I can only see 'Router added. Data will be available in 1 Minutes'. Thanks!
A bug with Conversation Report and group by Dst. IP
Hi there is defenately as bug in Conversation report implementation as if I press Conversation and thean Action togenerate report. I get nice looking one PDF/CSV reports with grouped by Destination/source IP totals. if the same report is set to be schedule (accesed from the same Action menu) then reports are being generated, but grouping is not available! I''m forced to export to CSV and use Exel and consolidate function to get total results. I think system could and should provide that out of the
ASA5550 - Netflow Analyzer - Interface problem
Hi, i have ASA 5550 IOS 8.2.1 k9 , and NetFlow Analyzer professional Plus version 9 build 9000. Issue is that i cannot see all 4 active interface on NFA . only 0, NULL0 , UserLAN, BranchLAN is shown. These later 2 are configured on GigEth0/0 and GigEth 0/1. I have 2 more interfaces configured on the ASA GigEth 1/0 & GigEth 1/1 as ServerLAN & Internet respectively which are not shown on NFA.. Also i feel that the interface shown and the conversation im checking do not co-relate..
Support for a 2nd Radius Server
I am currently running ManageEngine NetFlow Analyzer Pro 8.5 (8500). There is currently only one (1) entry for a Radius Server. Are there any plans to add a second or back up Radius Server entry? Thanks, Mark
Wrong Time Zone and Fail Report / Netflow
Hi, Wrong time zone, I already try patch and tzupdater.jar... Same problem on Desktop Central, Opmanager, Applications Manager, Device Expert.. I fix opmanager, applications manager .. But still continue Netflow and Desktop Central wrong time zone problem.. Example Pictures are below.. I think example pictures are help full :)
view Internet connections from/to to an IP address of PC in company network
I wonder any software can help to monitor Internet connection sessions between the router connected to Internet and the PC in the LAN. I means which PC made the Internet connection and what type of connection (such as ftp, down files, VOIP phone calls etc). We run out of Internet connection resource, before I upgrade my Internet bandwidth, I want to identify which PC make the most connections and what type of traffice it is. Raphael
How To take online backup for netflow?
Hi, i want to take a backup for netflow database and data while all related services are running, can you advise please, is there a solution or software to do this job? Thanks for your Help Bahaa Bacharouch
install problem
I get an error while unpacking message when I try and install your product
ipfix
Can netflow analyzer support ipfix? I am working on Juniper router but cant work.
Netflow Analyzer and Microsoft SCOM
Hi! We need a single point for monitoring and alerting and we will use SCOM for this. Does Netflow Analyzer have integration in Microsoft SCOM like SolarWinds utils? What kind of integration with SCOM possible? Thnx!
newly disovered interfaces?
Hi I have a router that acts as a VPN sever too. I have very strictly only exported netflow data for 7 of the router's interfaces. The data is analysed wonderfully and it is working flawlessly. HOWEVER Everytime a VPN user connects and a new tunnel is created, it seems that NetFlow Analyzer then picks up the Interface via SNMP, and adds the Interface to the router automatically. NOT the desired result unfortunately Is there any way that I can stop this behaviour, or any way at the very least that
No device is currently exporting NetFlow
Hello, I am trying NetFlow Analyser trial version with a Fortinet Firewall and I get the message : "No device is currently exporting NetFlow " I have double checked settings on the fortinet and everything is OK. I have used wireshark to check that the packets are coming on the computer with NetFlow Analyser is installed and I can see the packets. Also if I use sflowtrend to test, on the same machine, same port (with NetFlow stopped of course) I can see information coming on sflowtrend. Any help would
Daily Report
Hi All I have a question about how to get the daily report for month instead of hourly for a month. when i choose to see the report of a particular IP address from 1st date of month to last date, it shows always in hourly average. Instead I need daily average. Kindly help
snmp wont work properly
HI guys, I was wondering if yuo can help me with this problem. most of the gateways and interfaces on netflow analyzer enterprise edition resolve to their names and speed using the snmp string. but there are still a few routers that wont resolve the name and all i see is the IP. some of the interfaces wont resolve to their names either and i see ifindex###. weired part is some gateways names and speed are resolved with 2 of the 4 interfaces resolved but the other 2 wont. thank you, Usman.
Netflow invalid path
After installing Netflow Analyzer, we see the below when trying to access it via OpsManager - PLEASE HELP!! HTTP Status 400 - Invalid path /netflow/jspui/dashBoard was requested -------------------------------------------------------------------------------- type Status report message Invalid path /netflow/jspui/dashBoard was requested description The request sent by the client was syntactically incorrect (Invalid path /netflow/jspui/dashBoard was requested).
wrong DNS entries for computers
What is a stale period for cached DNS entries ? # with a selected "Resolve DNS names automatically by default " option all record are old and don't coresspond to current one mapping. Example: Dst IP: lp014.xxx.xxx witha source IP 10.20.40.7, DHCP server's log shows that this IP adress was leased to LP008, not to LP014 Lp014 has been turned of for arround 1 day. I couldnt find any DNS aging related settings. And one more when I try to enter "Click here to add new Domain/Site" settings nothing happens.
NetFlow plugin always doesn't work normally?
The NetFlow module in OPM has not worked in the recent. After restarting the service of it, it can work, but it can’t work after some hours. How to explain and solve the problems? The devices can normally send flow to the server of OPM. The netflow plugin 9000 is enterprise edition.plx
Netflow Analyzer 9.5 unable to use ipfix with extenstions of sonicwall
hi iam trying to use the netflow analyzer for flows exported from sonicwall when iam using ipfix with extensions the flows are not detected by netflow only when i use netflow version 5 the flows are detected and some stats are being show.. how to use netfix with extensions. Thanks & Regards Satish
Top N Source/Destination/Application Graphs Empty
My NetFlow Analyzer 9 server filled up on disk space yesterday. I made the data retention parameters as follows to remedy it: Raw Data Retention: 1 week One Minute Data Storage Settings: 1 Month Now, I have the following situation: My Top N Source/ Top N Destination and Top Application graphs all say "no data to display". The log file at /opt/ManageEngine/NetFlow/server/default/log/serverout0.log is giving me the following error, but I'm not sure if it's related: com.mysql.jdbc.exceptions.MySQLSyntaxErrorException:
A quick post/note about my experience with switching to the Linux version.
Originally we ran the NetFlow Analyzer software on a 64 bit Windows 2008 server (VM). As with most windows based software packages that deal with a lot of data and correlation it was good, but sluggish. Looking at the NetFlow Analyzer software on our Windows deployment I noticed that some pieces were Unix/Linux software packages that have been ported to Windows. I decided to bring up a 64 bit Ubuntu VM (with the same hardware specs as the Windows VM) side by side with the Windows version and compare
Technology Focus: Cisco Medianet - Monitor your media traffic
Welcome to "Technology Focus". The featured technology this month is Cisco Medianet. This IOS technology available on your Cisco devices can help in proactive monitoring and faster troubleshooting of all media related incidents thereby enhancing the overall rich media application experience. Our joint webinar with Cisco titled, "Cisco Medianet Media Monitoring – Accelerate troubleshooting and Cut costs", saw Ms. Patricia Costa, Product Manager, Cisco, discuss in detail about Cisco Medianet and its
Virtual Access Interfaces
We have set up netflow to our LNS router as we would like to monitor our DSL users usage and report back to them. Netflow reports all the the live connections as Virtual Access interfaces as shown on the router. When the connection is reset however we have a different VI assigned thereby making the graphs useless. What is the best way to monitor our DSL users using this? Regards Steve
Make alert when no flow or below thresholds?
Is there any way to make alert when no flow for IP Group, or when Utilization, Volume, Speed below defined criteria. Example 1: Volume for IP Group NOT exceeded 1MB, 3times, in 5min. Example 2: IP Group don`t receive flows for 5min.
NetFlow
Hi, I downloaded and installed the Manage Engine Free NetFlow Analyzer but i am not able to add my router into it. So please some body can help me to add my router.
Find the ip address using skype ?
Hi, i'd like to know if it's possible to know the ip address of the computer which are using skype. The NBAR module says i have skype traffic, but i cannot find the ip address. Thank you.
SNMP Nbar says "no data available"
Hi, Netflow Analyzer in installed on my server, NbarTest.sh says everything is ok : ---------------------------------------------------------- NbarTest.sh XX.XX.XX.XX 161 public Device supports NBAR. Trying to Get the values of protocols Table. unknown ftp http egp gre icmp ... ---------------------------------------------------------- The data is here, because when i do a show ip nbar protocol-discovery on my routeur, i have : ---------------------------------------------------------- #show
How to Monitor Number of Flows
Hello: We have NFA Professional Plus 9.5 and have about 160 interfaces being monitored. Our flow count is generally about 5000, sometimes goes upto 7000. We are using MS Sql as the database backend. Our NFA box itself is Xeon dual core dual proc box with 12 GB RAM and is solely used for NFA. We are having stability issues with this product. It crashes frequently and stops collecting data. In repeated tech support calls we are told that it might be due to peak flows exceed the capacity of the
netflow analyzer 9 doesn't start if can resolv DNS.
Hi We're evaluating NFA v9 on a centos linux but it only start if the /etc/resolv.conf is configured with a google dns (8.8.8.8). It does not works wirth our DNS servers. When we run ./run.sh, with a DNS different from 8.8.8.8 it shows a error: Falied to start the server. Any idea why? Thanks Israel.
Deleted device interface and I cannot add it back
I've deleted an interface on a device that was previously collecting data. After realizing my error, I tried to add it back but without success. How can I get it back?
Fresh installation of NetFlow Analyzer - 9500 binary?
I am going to migrate from one distribution of Linux to another, and so I need to perform a fresh installation of NetFlow Analyzer. We have a license for Netflow Analyzer, but the current installation has been upgraded over time from around 7 to 9.5. Is there a 9.5 binary I could use to install directly to the 9500 release? Regards, Paul
I deleted a device by hazard and now, I cannot have it back under Netflow Analyzer
Hi, I am new to Netflow Analyzer. Yesterday, I created about 20 devices and this morning, I have deleted one device by hazard. Whatever I try, I do not succeed in having this device back under Netflow Analyzer. I there somebody who can help me? Many thanks
Netflow analyzer 9 problems
application services on the server not restarting. what could be the problem ?
Manage Engine Netflow analyzer
How do you delete devices in Manage Engine Netflow analyzer?
Flows from the Cisco router interfaces
Hi I am having problem with some routers not showing their line tags. I upgraded to version 9 netflow analyzer from 8 which i did not have problems with same interfaces. I monitor about 65 Cisco interfaces and had no problems with these interfaces in the previous version of Netflow analyzer. Is there a solution for this . Please advise Regards Mpumzi
Next Page