Information on Netflow Analyzer!
Hi all Just wanted to ask we have a DSL router 575 LRE provided by our ISP ..can i configure the Netflow Analyzer with this... Im a newbie in routers so any help will be appreciated Thanks in advance...
how to configure Router interface
Hi, I just came across Netflow but dont konw how to configure the router interfaces and to get graphs of my network. I have just 1 cisco 2600 router and 1 firewall. Anybody knows the basics to start Netflow
Netflow alerts
Hi, is there a way to configure netflow to send alerts to OpManager when no flow is received via a particular link? Most of our WAN links are either microwave or DSL links connected to ethernet ports and therefore the port never goes down which makes it impossible to monitor the link status. Regards, Ramzi
NFA Professional Edition 7 reports
hi it would be good if you can in the final release of NFA Professional Edition 7 add to the scheduled reports the option to compare traffic from multiple devices. Regards, Ramzi
No inbound traffic showing
Hi, Yesterday one of our monitored interfaces stopped recording any inbound traffic. In the netflow console it just shows no data availble. If i change the data range to a previous week there is heaps of data. I'm pretty sure nothing has changed on the router. here is the running config, please check for any errors ASAP as we really need to have this interface monitored. version 12.4 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption service sequence-numbers
No inbound traffic showing
Hi, Yesterday one of our monitored interfaces stopped recording any inbound traffic. In the netflow console it just shows no data availble. If i change the data range to a previous week there is heaps of data. I'm pretty sure nothing has changed on the router. here is the running config, please check for any errors ASAP as we really need to have this interface monitored. version 12.4 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption service sequence-numbers
How to enable netflow or jflow in Juniper SSG20, 350 and ISG
Hi, We have recently purchased Netflow Analyzer Enterprise Edition. I would like to know, how to enable Netflow, Jflow or Sflow on Juniper SSG20, 350m and ISG. Also, would like to know same for NBAR which is available on Cisco. Thanks and Regards, Vitesha
NFA v7 Reports page
After creating a report on the reports page, and that report running as scheduled, the reports web page is no longer viewable. This happens after a fresh reload as well. It is browser independent, same results on IE,Firefox, and Safari
Adtran and V9 flows of unknown template are received from
Is there a way to get the Adtran version 9 flows to stop showing up in the network page. I have a large deployment of Adtran routers, and would like to get these templates to match so I can get all the information sent from the routers.
Total number of users (source IPs)
Hello, Is it possible to have the total number of users (or source IPs) accessing the network over a time period? As I understand, we get a maximum count of 500. But we'd like to have a count of the total number of users over a period of time, if possible. Thanks. Sourav
Speed not set correctly?
I am new to netflow (great product by the way) and I am not sure how to set the speeds on the interfaces. Do I calculate this by the line speed or the interface speed 100MB? So even though different sites have different line speeds but all the router interfaces are 100BM full duplex I calculate by 100mb? PS> I do not have snmp setup. Thanks in advance.
Traffic Volume per Subnet
Hello, Following configuration of IPGroups (subnets) we would like to compare the volume used by each group. The only function seems to be the "compare" view. However it seems that it is not possible to export all the data in CSV. right? As we have more than 100 subnets we would lie to have a comparison either on the same graph of Top10 for instance or at least a CSV export function of all the data for all subnets. Is this currently possible? If not any disponibility on roadmap? Thanks PS: I use
Source and Destination Analysis
When trying to analyze heavy traffic utilization, the destination address is always the router int. This is of course working as designed. Example: If someone in an organization starts a download of a 500MB file, and let's say it makes the router INT jump to 100%, then we see that on the dashboard or on any of the reports. How do I map this back to the original system requesting this? The difficult part of doing analysis with this to is the complete point to point report. Maybe I have not set up
NFA service stopped
Hi all, Could u explain to me, why my NFA Server sometime can't works ? I've tried to scan the server port, and the server is able to accept the udp 9996 (netflow packet), but the web graph can't view the managed devices. And, after i restarted the ManageEngine Netflow Analyzer 5 Service, the server are back to normal. I'm using Netflow Version 5.5.0 and Build Number :5502.
NBAR not working
Hello I am in the process of evaluating Netflow Analyzer and cannot get NBAR to work. I have two routers 3640 and 1760 and both support NBAR. I checked both cisco site and run the command "show snmp mib | include cnpd" and received an output as shown in previous examples. I enabled NBAR on an interface and configured SNMP, but still Netflow analyzer says unknown when trying to enable NBAR. Am I missing something in the configuration or is this a bug in the Analyzer? snmp-server community public ro
Print & PDF options
Running NFA 7 beta Could you please add these options to all pages so that all data is availble for reporting? Thanks.
Top Traffic --- Pie Charts
Running NFA 7 beta. Could you please add the Start/End timestamps that the data in the Pie charts cover? Thanks.
Inconsistent DNS setting
Running NFA 7 beta. I have DNS set to resolve as default. This works in most reports I have seen. An exception is the "consolidated" reports. These default to IP setting with option to resolve DNS. This is an issue when scheduling a consolidated report -- I want to see resolved IPs. Could you please change the consolidated reports to be consistent with the global DNS setting? And anywhere else there may be an inconsistency of the setting behavior? Thanks.
1 Minute Resolution and Timestamping
Hi; The highest resolution NFA can provide seems to be 1 minute (Active timer is set to 1). This 1 min resolution may not be enough for performance assessment. For instance download time of a reference web page or FTP transert time of a reference file. However the timestamp information associated to the start and end of each flow is included in Netflow format. Is it possible to have access to this information? If this information is not stored, is it possible to add this field and store it in the
NBAR & VOIP appli
Hello, According to Cisco documentation, NBAR can recognize VoIP appli such as SIP, MGCP, H.323, SKYPE. However when we look at the application supported by NFA we don't see these applications. Can you please clarify if the above applications are supported. Thanks
web interface problems
Not sure if this has been mentioned before, but the Netflow 7 beta has some problems when you access it remotely by the web. Everything works fine when you access the web interface locally, but when you access it from a remote address you'll see html/javascript errors when accessing some tabs. you also notice a different title, when accessing it remotely it says Netflow Analyzer 6 in the title bar of IE. Locally it says Netflow Analyzer 7. Somehow you'll get a different interface for accessing remote
Configuration of alerts in NFA of link
Hi Support Team, It would be good if in NFA I can change the time of monitoring of link. Today, the time be configuration for 15 mim, but is much time. Thanks and regards. Anderson Carvalho anderson@inspirit.com.br www.inspirit.com.br
Re-Install NetFlow 6 Professional
Hi all, I need to unistall the Netflow v6 due to I don't have enough disk space to handle all flows. Now it's installed on C: I need to reinstall on D: unit on same server. Any suggestion to don't loose any flow? Thanks in advance Javi
Somehow i locked myself out...change pw via MySQL?
Good Morning guys! I somehow managed to lock myself out of the Webfrontend and i can't sign in again. Very strange, don't ask me how i've done it, i don't know either :( Is it possible to change the admin password via a MySQL entry? If so, what would be the command?
Mysql - ibdata1 with large size.
Hello, could some one help me with an mysql ibdta1 with more than 3.5G is it normal? Configuration: Retain raw data : 1 Day Retain One Minute Data: 3 Month Retain NBAR data: 2 Month [root@UBKGCSRV13 data]# pwd /opt/AdventNet/ME/NetFlow/mysql/data [root@UBKGCSRV13 data]# du -s -k -h * 32K ib_arch_log_0000000000 3.7G ibdata1 5.1M ib_logfile0 5.1M ib_logfile1 184K mysql 2.8G netflow 8.0K test 8.0K UBKGCSRV13.pid Thanks, Antonio.
hierarchical QoS policy map support for CBQOS
i have a following policy map. policy-map QOS class GOLD bandwidth 3000 class BRONZE bandwidth 1000 class BULK bandwidth 500 shape average 4800000 service-policy SCAVENGER class class-default bandwidth 2500 random-detect dscp-based interface FastEthernet 0/1 service-policy output QOS when i used NF Prof v7 beta to discover the CBQOS, it always gives me the inner policy map (SCAVENGER) as the OUTPUT policy, instead of QOS. looks like a bug.
IP Group Speed in bps ?
hi i want to be sure my calculation for the IP Group Speed field is correct. i noticed that the default is 1000000 which seems misleading. i have a 3Mb pipe, so i'm assuming i calculate this as 1024 x 1024 x 3 = 3145728. please let me know and thanks. also, regarding which interface of an IP Group to monitor, my assumption is that since i am trying to understand WAN bandwidth utilitzation i should always monitor the WAN interface. please explain if this is not the case.
Total traffic per IP IN+OUT
It could be that i just haven't looked in the right place, but while testing the NFA 7 beta version I couldn't find an overview that tells me how much bytes 1 IP has send and received in total. There are separate tables that we can manually add up to each other to get the result (bytes IN/OUT), but one table telling us per IP how much data it has send and received would be great. Even better if you can filter on that table by protocol, so that you can see per IP all the data received/sended based
Netflow Analyser 6 wont uninstall
Hi Uninstall doesnt work, just attempt to install. Any help appreciated XP desktop Thanks
TOS in NFA 5502
Hi, Would u tell me, how to view my TOS-bit in the NFA 5502 ? I can view the some specific information on application traffic (including TOS,TCP Flags), only if the Alarm has trigered. And, 1 more, i've set the routers to set presedences for some applications, but when i viewed in the NFA, the TOS Precedence value is set to 0. The Actual Value on my router is 2. Any ideas ?
Customise email reports with company brand
Is it possible to customise the scheduled email reports with our own company branding?
DSCP
We have implemented QoS - DSCP Marking on two routers, Out of which through Netflow==>More Reports==>Troubleshoot==>DSCP i am able to see the DSCP marking on one router i.e Cisco 3745 (12.2) but other router i am not able to view the DSCP marking Cisco 2610(12.2). Through CLI interface of Cisco routers i am able to see the DSCP marking on both the routers. Kindly Help us on same.
Security issue with Firewall Analyzer
We are evaluating ManageEngine�s NetFlow Analyzer and have the following problem. We create separate logins for each of our clients The clients are �guest� accounts The logins only have access to their own devices The problem we are having is when a client logs in they can only see their device BUT can see all alerts for all devices. They can just click on an alert and then can see a list of all alerts with client names/ip address etc and view traffic graphs of devices which they should not have
run.sh Java Error
When running run.sh after a successful Installation i'm getting the following error in ../log.txt: (May 19, 2008 11:04:48 AM), Install, com.installshield.product.service.product.PureJavaProductServiceImpl$DiskSpaceCheck, wrn, null I thought about too few HDD disk space, but it worked on a machine with less space. I'm running ubuntu 8.04 Hardy Server Any ideas?
Google Map pins change colour when the device has an error?
Should the Google Map pins change colour when the device has an error? This function works in OpManager, but it doesnt in NetFlow.
1 minute data samples
I am working on a analysis report that documents observations from a specific selection of date ranges for approximately 8 interfaces. As this is a work on progress, I have complete half of the report with utilization snapshots for 4 weeks worth of 1 minute data samples. Now that the date has crept over a month, the graphs are now using daily samples which look bad. (custom selection). Is there any way to force these graphs to use the minute samples given that I selected retain 1 years worth of minute
Traffic not captured
Hi I am using version 6.1 professional Edition, Our ISP reports the traffic utilization on a monthly basis, and over the last 2 month we noticed an average of 1.3 GB of increase in traffic on one of the interfaces, but its not showing in netflow analyzer. I mean its not capturing the increase and on the traffic by Application it shows 2 major BW consuming Apps and all the rest are less than 1%. Is this an issue with the pc network card not being able to receive all traffic or is it a problem with
Bind Netflow server to IP
I have OpManager and ServiceDesk bound to specific IP's on a box so they can all use port 80 and have DNS entries easily assigned but I can't figure out how to bind the Netflow server to a specific IP address. Any ideas? Cheers Dan
Association application & IP
Actually i use the application mapping with ip address. My servers have change of ip address: many applications all the range IP has change many applications only a part of the range ip has change many applications will disappear new applications use a part of a range IP of an old application If i create new applications with IP range of existing applications, does the functioning of netflow is normal? If i delete application in application mapping, do the statistics are lost ? regards
Which interface to use on a Cisco 877?
hi, What interface should I use to monitor the bandwidth on a Cisco 877? I thought it would be dialer 1 or VLAN1, but they don't show the right data, but when I tried Virtual-Access2 then this showed traffic that made more sense to what I was doing. What is this interface?
Next Page