Netflow Analyzer - Netflow 9 Features
I was wondering when the new version of Netflow Analyzer is coming out? As our company is very interested in enabling Netflow 9 for Voice & Video traffic details.
Cisco 750x subinterface
I have installed NFA today and it looks like a great product. Congratulations on that. I have but one problem. One of the interfaces has subinterfaces. NFA shows one of the two subinterfaces, but not the other. It doesn't show the physical interface either. Interfaces are on vip cards So I see the interfaces: 1/0/0 1/1/0 4/0/0.200 (802.1q) 4/1/0 IfIndex6 The interfaces not shown are: 4/0/0 (seems ok) 4/0/0.100 (802.1q), not ok. This subif has very few traffic (bits and kbits) The netflow cache is
Netflow reports - time lag
Hi all, what is the reason for a time lag we are seeing in any reports generated? The end time is current (as per the PC clock) but the data itself ends 20-30min behind real-time. I have reinstalled the app but no change. thanks, Marty.
Netflow External Database
Hi I would like to consolidate netflow data on my powerfull corporate mysql server (i've got an even more powerfull oracle server). Is there a way to externalise the netflow db ? Would it be possible in a future release to replace mysql by oracle ? regards Ced
No NetFlow Data generated by Cisco 2610
I've got 2 Cisco 2610, same IOS, both not generating data. (I've also some 827 models which are generating NetFlow Data just OK, so I now everything should be working). On the Ethernet0/0 interface I've got: ip route-cache flow In the general config I've got: ip cef ip flow-export source Ethernet0/0 ip flow-export version 5 ip flow-export destination 10.1.3.172 9996 Here's the output of show ip flow export: Flow export v5 is enabled for main cache Exporting flows to 10.1.3.172 (9996) Exporting using
Bandwidth Mismatch
Hi, I have installed Netflow Analyser 4 on Linux. I have enabled the flow-export on my router. When I compare the bandwidth which is showing on the Analyser window and on the interface of serial, it is not matching. For ex. on the analyser on serial link it is showing 300K as traffic, but on my router it is showing 1.4Megs. Kindly someone help me in this regard why it is not matching ????? Regards, Girish.
Add routers
Hi I would like to know how we can add router to the netflow collector? I have CISCO 2651 router here.
How I upgrade from version 4.0.2 to version 5?
I tried to upgrade or migrate from version 4.0.2 to 5. But when I tried: 1.- The install of version 5 uninstall version 4.0.2 2.- After I install version 5 (I copy data directory) the licence file (for version 4.0.2) dont funtion. I cant applied this licence file. I have a ticket open (ID 12300525). The support team recomend me upgrade netflow. How I do this?? Thank
Netflow Analyzer as security tool
Hi, I was wondering if Netflow Analyzer can be configured to detect network traffic anomalies, such as worm or virus, etc. Other commercial tools use Netflow as their primary traffic detector. I was wondering if this was on the roadmap for Netflow Analyzer in future versions. Will this be part of the new version of Netflow Analyzer or will it be a separate product? Netflow Analyzer is a very good bandwidth reporting tool. Once it can automate generating reports, then it will be an excellent bandwidth
No source or destination IP info
I am getting all of the info sent to the system but when I try to drill deeper I don't see any of the source or destination IP info. When I show the cache flow on the router it's there but NetFlow isn't showing it to me. Did I miss something?
Uso em equip motorola
The Netflow Analyzer works in other products than cisco?
Utilization above 100%
Hello everybody, the Netflow Analyzer is a great tool. We use it to analyze the flow export of two routers. Even though the utilization ist calculated with the correct link speed NetflowAnalyzer shows me a utilization of above 100%. I use the folloving Version: Version : 4.0.2 Build Number : 4020 Kind regards, Chris
Difference between Source/Destination
Hello all, This is probably a really simple question but what is the difference between SourceIN and DestinationIN and the same with the OUT? Both Source and Destination (either In or Out) have the exact same total volume of data that passes through except of course with different IPs. So is SourceIN the amount of data coming into the network and DestinationIN is where it is originating from and vice versa for the OUT (where SourceOUT is the originating point of data coming out and DestinationOUT
95th Percentile
I'm looking for 95th percentile bandwidth usages. I looked through your forums and have found that it's in the roadmap. How far down the roadmap is it, and is it possible to get on the testers list as soon as it's setup? We are really impressed with ManageEngine and it works great as an internal tool, but for us to use it as a companywide solution, we need it to be able to accurately report 95th percentile each month (for billing purposes). Thanks, Wyatt
how to run NFA4 as non root user?
NFA4 installed on RHEL 4AS. Install was run under root account how I can startup NFA as non-root user? ( 'nfauser' account for example)
Version 5 doesn't start
Installed Version 5. After Starting Container Server, I got the massage Exception in thread "Compiler Thread0" java.lang.OutOfMemoryError:request 32756 bytes for ChunkPool::allocate. Out of swap Space? Please Press a key.... What does it mean? After pressing a key Server stops, and no Netflow DATA is collected, or shown. What can I do??? :?
nprobe
We would like to know if netflow analyzer can work with nProbe and if we need any special configuration for nprobe. Is anybody using nprobe with netflow? Regards Luigi
traffic slows down and almost halts on the router
We have a router (2600, IOS ver 12.2) and when I configure the internet (serial) and internal port (ethernet) for Netflow support and configure the router to export Netflow data (source is the internal interface) , the traffic slows down or stops at all. Should I configure the internet interface at all ? Which interface do you recommend to be the source of the packets ? Thanks
Network WAN Bandwidth Managment
Hi I would to have Network Bandwidth Manager software which will control bandwidth on events. (like when particular ip logs in provide full bandwidth, or restrict ) Thanks in advance !!! Nivas nivaspatil@msn.com
Automated Reports
Is there any way to automate reports like your Firewall Analyzer product? Can this implemented in an update to version 5? Automated reports would be a nice feature to have.
Server HDD full and NF not able to restart
I am running Win2k, 2.8ghz with 2gig of ramm. The 60g hard drive I am using filled up with the setting to one day. I cannot get the software to restart. Is there a way to keep the hard drive from filling up? Should I set it to 6 hours? Is one day too much information for a 60g drive? How can I get the NF software to start running again so I can change this value? Thank you in advance for the help. PS> It was fine for several days, before the hdd filled to capacity and shutdown the service. Is the
Install to a SAN?
I have a fiber raid array that is on the network. Is it possible for me to map a drive to that array and install the NFA to that mapped drive, and still have it work? I notice in previous posts that you cannot point the data storage from the mysql install to a separate drive, you must install the entire program on that drive. Thanks!
Sort items in folder "IP Group"
Hallo, how can i sort (alphanumeric) the items of the folder "IP-Group": current: Alle Gruppen A039_XXX Munich Alle A011_XXX Frankfurt A001_XXX Cologne "Fifi"-Sort my request (automatic sort): Alle Alle Gruppen A001_XXX Cologne A011_XXX Frankfurt A039_XXX Munich Thanks Tom
SW-Crash NFA
Hallo, the nfa 5 has been crashed with the following error-message: ype Exception report message description The server encountered an internal error () that prevented it from fulfilling this request. exception java.lang.ArrayIndexOutOfBoundsException: Array index out of range: 0 java.util.Vector.get(Unknown Source) org.apache.jsp.jspui.traffic_jsp._jspService(traffic_jsp.java:376) org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:94) javax.servlet.http.HttpServlet.service(HttpServlet.java:810)
can't receive any data
我使用的是中文版的Netflow Analyzer v5.0，我安装好，使用1小时后就会出现下面的图像，提示接受不到数据。重装后，一小时内数据接收正常，但是接口的流量比实际小，使用1小时后，出现如下图所示的现象。 在c12008上启用的NETflow，配置是按照NETflow web 中的帮助中说的配置的 请技术人员給予帮助，谢谢！[/img]
How to change the IP address into dns name?
In the SourceIN/Out (DestinationIN/OUT, Conversation) top report, after we click the [Resolve DNS], the Source ip or/and destination ip are still display as "IP address", not the dns name. Why NFA cannot reslove the dns name? I means how to change the ip address into dns name? for example: for 71.5.7.191 , its dns name will be www.sina.com
TMP-directory
Hallo, i am running Netflow V5. The following problem occurs: The tmp-dirctory on the root-partition is still growing with *.png-files. -rw-r--r-- 1 root root 6300 Mar 1 16:24 pieChart1141226661366.png -rw-r--r-- 1 root root 6326 Mar 1 16:24 pieChart1141226671857.png -rw-r--r-- 1 root root 5919 Mar 1 16:24 pieChart1141226679148.png -rw-r--r-- 1 root root 6326 Mar 1 16:24 pieChart1141226687902.png -rw-r--r-- 1 root root 5919 Mar 1 16:24 pieChart1141226690586.png -rw-r--r-- 1 root root 8226 Mar 1 16:24
Exclude IP-networks or conversations
Hallo, we are evaluating the NetFlowanalyzer V5. The problem / feature request: Our customers are connected with two routers (E1 or E3-connections). Every router has two interfaces with different Subnets for example: Customer A (IP-Range 10.1.0.0/16) Router 1: Int Fe1 => 10.1.1.2/24 Int Fe2 => 10.1.2.2/24 Router 2 Int Fe1 => 10.1.1.3/24 Int Fe2 => 10.1.2.3/24 HSRP-address: 10.1.x.1 Customer B (IP-Range 10.2.0.0/16) Router 1: Int Fe1 => 10.2.1.2/24 Int Fe2 => 10.2.2.2/24 Router 2 Int Fe1 => 10.2.1.3/24
Regional settings / languange GUI V5
Hi, I run NFA V5 on my workstation with XP sp2. I use the English XP version and generally all GUI are English. The regional settings (date, currency etc) in XP are set local. Somehow this 'overrides' the language setting with the install of NFA. When I use local regional settings in XP, the NFA GUI changes to my local language. This changes back to English when I change the regional XP settings to English. What language is chosen during install, really has no impact. How can I use my local regional
Fast Ethernet Interface stats beeing Calculated on 1Mbps
Hello I have an issue on my Primary fastethernet connection. The interface is connected at 100Mbps. Netflow v5.0 is reporting this link at >100% utilised. Drilling dowmn on the reports I get a message under the main graph saying. The graph stats are being calculated on 1Mbps Any Ideas. Thanks Steve
Next Hop or user IP collecting?
Hi, I use only 2 days of your NFA 4, it's a great program, but i don't see the most importand data : our users net usage. My cisco router is 1841, with 1 internal interface and 2 dialer interface (ADSL). If i see the verbose data flow in router, it's contain the internal address as next hop data. So NFA collect data only my router outside datacount, not next hop or internal addresses. How can i configure NFA to collect NextHop data? THX : Libus SrcIf SrcIPaddress DstIf DstIPaddress Pr TOS Flgs Pkts
Failed to start NFA
Hallo, i cannot start the NetFlow-Analyzer 5.0 (Linux): Server is starting. This may take a couple of minutes ... This evaluation copy is valid for 28 days Unclean shutdown of previous run. Failed to start the server. Please refer logs for more details [1]+ Done ./run.sh $ uname -a Linux G100STUF90001 2.4.21-32.ELsmp #1 SMP Fri Apr 15 21:17:59 EDT 2005 i686 i686 i386 GNU/Linux What is the problem? Thanks Tom
NFM and auto-refresh
Hello everybody, can i configure NFM somehow to auto-refresh the display like utilization and so on? Thanks, Kind regards, Chris
Netflow Traffic
Hi, I have downloaded an evaluation copy of Netflow 5 and currently testing it on 2 Cisco 2811 routers with 2 Ethernets and 1 serial WIC. On the first router Fa 0/0 and S0/0 are showing the IN and OUT traffic while Fa 0/1 is only showing the IN traffic On the second router Fa 0/0 is showing the IN and OUT traffic while Fa 0/1 and S0/0 are showing only the IN traffic. I understand that Netflow by default works in ingress mode so how come some interfaces are showing the IN and OUT traffic. Thank you,
Utilization graphs
Hi, besides NFA we are running MRTG to visualize the traffic load on our links. We have now seen that MRTG (and other online monitoing tools) show us full utilization (e.g. 2048k), but NFA reports for the same period only 1500k. This is also true for the percentage graph which shows only 75% load... Any explanation on this ?
NetFlow Analyzer data storage
NetFlow Analyzer has two modes of data storage - the raw data and the aggregated data. Information about raw data NetFlow Analyzer 5 allows you to store raw netflow data for upto 2 weeks (minimum period of 1 hour). This period is configurable and can be set from the user interface (RunTime Administration -> Raw Data Period). The period you can set it to depends on the flow rate and on the amount of free hard disk space available on that drive. The raw data is used for generating the following reports
AS Sorting
Is their a way to Sort the Autonmous Systems Screen by Most or least Traffic IN or OUT Columns? That seems like such an easy thing to add since the data's already in a database. Or is their a way to do a Custom Report to achive that one fuctionality. Otherwise the data is perfect for our needs! Thanks,
Total Traffic Speed
I am sending udp traffic streams of 1.5 Mbps. I can see in the application category the present of the correct statistics regarding the application. But in the Traffic category i see the total bandwidth twice the actual (3 Mbps instead of 1.5). Any ideas what can be wrong?
Ability to "ignore/remove" certain hosts from Top
Is there a way to have certain top talkers removed/filtered from the displayed list ? I am evaluating Netflow Anlayzer V5. Thanks in advance.
Netflow exporting not being detected
Hi, I've currently downloaded the v5 analyser and connected it up to our multiservice router (designed for Ericsson) that has netflow software running on it (derived from NetBSD codebase). We support version 5 and 9 netflows. When I set our output to v9, the management console detects this and complains, this proves I have connectivity between the router and the management console. When I then change to v5, the management console never shows that it is receiving anything. When I run Ethereal I see
Next Page