Listening on multiple ports.....Why Not....And how to do it?
Hello Support, I have an issue; I have a Linux device has three physical interfaces logically attached to a single IP address labeled �local�. I.E... a single IP can access either physical interface. What I'd like to know is can I configure ManageEngine Netflow Analyzer 4.0 to listen for multiple ports? Under Runtime Administration I see that I may change the NetFlow Listener Port for the default of 9996 to something else, but what I really what to do is add a second listening port. Exp. NetFlow
IfIndex
I have a 7204vxr with 266 interfaces, 1 FE and 265 ATM subinterfaces. SNMP retrieved all but 6 or 7 of the ATM interface names. The others came up with IfIndexYYY names.
Listening on multiple ports.....Why Not....And how to do it?
Hello Support, I have an issue; I have a Linux device has three physical interfaces logically attached to a single IP address labeled �local�. I.E... a single IP can access either physical interface. What I'd like to know is can I configure ManageEngine Netflow Analyzer 4.0 to listen for multiple ports? Under Runtime Administration I see that I may change the NetFlow Listener Port for the default of 9996 to something else, but what I really what to do is add a second listening port. Exp. NetFlow
Is listening on more than one port possible?
I have a linux based device that is using nprobe as a netflow probe. I understand that NetFlow Analyzer needs to receive flows from all interfaces on a device to display IN and OUT information, however nprobe does not allow me to configure two collectors with the same IP and Port. Is it possible to have NetFlow Analyzer listening on two ports at the same time, so that I can configure nprobe to send flows from eth0/0 to 192.168.1.10 port 9996 and from eth0/1 to 192.168.1.10 port 997 for example? Thank
source - others
Hi I'm running the demo of netflow analyzer and i have a few probs/questions. i've configured to receive from a number of cisco 2921 and 2691 routers, i seem to be receiving the netflows fine, however, when i drill down to source, i just see everything catogorised under 'others' and not for individual ips. Further clicks on destination shows the same 'others' and clicking on conversation reveals no data available. This is the same for all the routers. Regards Keith
periodic automated port check
hi, I am trialling your product and would like to know if is possible to periodically check, or use an ongoing check, for flows to/from particular ports or apps and then have an automated alert generated, ie email? If this isn't possible is it possible to access the backend database to do this? Cheers Garry
Errant data? Last Hour vs. Last Day
I am evaluating the NetFlow Analyzer and am seeing some wierd information: When I look at the "last hour" data of one conversation flow, it is showing 45MBs of data. When I switch to "Last Day", it is only showing 4MB for the same conversation. How can this be? Shouldn't the Last Day show all of the data? I have nTop running on another machine and it is showing that the total data for the day is over 189MB (even though nTop doesn't show conversations, I know that the host in question only converses
Netflow server reboot
Is there a way to keep the netflow data after a server reboot?
Hello! I'm in the cisco 4006 switch configure netflow.
Hello! I'm in the cisco 4006 switch configure netflow. but show ip cache flow no date configure : config)>#ip flow-export version 5 config)>#ip flow-export destination 10.30.1.1 8888 config)>#interface vlan 3 config-if)>#ip route-cache flow cisco 4006#sho ip cache flow IP packet size distribution (0 total packets): 1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 512 544 576 1024 1536 2048 2560 3072 3584 4096 4608
Scond startup error!
Hello, I'm using evaluation version of analyzer on windows server 2003 sp1 and after I restart the netflow analyzer through shutdown.bat and run.bat files I recieved a following message: Database creation failed, refer server/default/logs for more information.... If I delete netflow directory in database catalog (C:\AdventNet\NetFlow\mysql\data) then analyzer startup successfuly. What can I do?
Interfaces
Hello everyone, My NetFlow analyser works well and I must say what a good product it is. It has really helped me in determining my bandwidth consuption. But I have a problem, on my dashboard it reports interfaces as "ifindex1". I have tried putting in the correct SNMP community string and still does not work. My second problem is that its able to show some applications their source port and destiny port. For some it does not show that, could there be something wrong. Please help. Thanks for the help
I can�t acces to netflow browser and problem with pdf export
Hi there 1.- I install netflow analizer 4.0 trial, we have configurated around 25 interfaces. today may 9th, i can not access to web aplication and check the file mysql, and notice that the counters stop aroun 5 am, so i stop the process and then star the application so I can access again to weg page. In my error file i have the next lines 050509 18:01:00 InnoDB: Database was not shut down normally. InnoDB: Starting recovery from log files... InnoDB: Starting log scan based on checkpoint at InnoDB:
NetFlow Analyzer fail...
Hi, during execution of NFA as service I have in system log this error : There were 5 failed launches in a row, each lasting less than 300 seconds. Giving up. and the service fail, it restart only manually. Thanks
Can I see more than 100 records?
I have in my intranet:1 firewall and 10 users with public IP. I see them in 100 records in one hour. But traffic of firewall is too big and traffic of these 10 users is go to "Others" when i make report of one week or more. I want to see all traffic. This is real with this software?
Is this setup okay for NetFlow
We are evaluating NetFlow analyzer, we have setup everything in our router (Cisco 1721) and we are pointing to an IP of a machine inside our DMZ. So the IP is a mapped IP (public<->private). Is the above setup okay for analyzing. I understand that because we are NAT'd that I will only see the traffic for the egress interface. In summary here is our setup DMZ [Cisco 1721] <------>[NetScreen 204] <-------> [NetFlow system] (Mapped IP) Lastly, the speed it is reporting shows last hour on the main dashboard,
Export Netflow Old Data
Is there any way to export netflow data from other equipment-compute? We are recollecting all netflow data in other machine, and I cannot use two destination statements in switch configuration. thanks in advance
SSL
Is it possible to use SSL instead of http? I'd like to protect login\passwd used for this Application. My OS is Microsoft. Thanks
Extremely slow dashboard view
We have been running Netflow Analyzer for a while and we have found that sometimes the All Devices-Dashboard view is extremely slow to appear. Sometimes taking up to 5 minutes. Generating reports and all other screens appear fairly fast. This only appears to happen sometimes and it only ever affects the Dashboard screen. When this happens we check the server and the CPU utilization is never above 25 percent and there is no high traffic on our network. We have about 100 devices in our list and the
Ask about Netflow ifindex
I've tried Netflow and when I check the ManageEngine, it show two ifindex, ie ifindex1 and ifindex2. What do these ifindex mean?
Netflow Mysql Database
Hi everybody, I am searching a way to administrate my netflow database. I need to make backup of all the flow collected and sometime to purge the old records (not the entire database). - How can I backup the mysql database ? (mysqldump can't work because we don't have the sql password) - How to clean the old flow (for example 3 month ago) - How to restore the backup to see old flow logs without erasing the actual data ? Best Regards, Johnny
Output traffic
Why does I not view my output traffic??
Unable to use last licensed interface
After i have registered a 20 interface license file, i am not able to assign the last interface license to a interface. I am only able to use 19 of 20 interfaces. One of my routers has 3 interfaces, all the others have two interfaces. Any explanation of this behavior, and how will i be able to use the last licensed interface ? Best regards Riisom
With what CISCO routers does NetFlow works ?
Hi, I would like to know witch CISCO routers uses Net Flow V5 and with what IOS version does it work. I've searched CISCO site, but I only found info about NetFlow V9. I would also like to know if someone has used Motorola routers with netflow. Is it possible ? Best Regards, Willy Alaerts
Netflow startup error
Hello, I installed evaluation version on Windows Xp SP1 and Windows 2000 Server SP4. Both of the installation was successfull, but when i tried to start the service it gives an error message like "Unclean shotdown of previous run. Failed to start the server." So i could never started to use it. Can any one please help me about it? Thank you.
Monitoring firewalls
Does anyone have experience monitoring Symantec Velociraptors? These do not support SNMP gets but do send traps. I have several sites I would like to monitor but my two NOCs have raptors. I suppose I could monitor the routers, but my private addresses are all NATed or VPNed so I wouldn't get much useful info. Thanks, Cooper
Traffic Time!
Hi, I am testing the trial version. I can see only maximum of top 10 results. Is it restrictions in trial version? How much results can be seen in original version? I can see only minimum of one-hour traffic, if I want to see last 10 min or 5 min traffic, then if I select manually from the calendar, then I can it. But to back to last one hour, there is no option. Again we have to repeat the same procedure. It will be great if there is time and date display with traffic also. When consolidated Report
Lincencing
Hi!!! I am evaluating this software and have some questions, hope you can answer me on this: 1. As I can see max offered package is Single Installation License Fee for Fifty Interface Pack, I need 150, do I need buy three of these, or? 2. Are this lincences time unlimited or they expire and must be paid again after some time? thanks
Dashboard view is still slow after upgrade
My previous posts mentioned that the Dashboard View was very slow on our system. We have now installed Netflow Analyzer on a dual 3Ghz Pentium machine with 3gb of RAM. The dashboard view is still sluggish. Sometimes taking 15-20 seconds to appear. This may not seem like much but its annoying when you want to check the reports on multiple devices and becomes time consuming waiting for it to appear each time you go back to it. I strongly beleive you have a problem in the way the dashboard view operates.
How to setup if I need netflow export 2 interface ?
How to setup if I need netflow export 2 interface ? ex: router#enable Password:***** router#configure terminal router-2621(config)#interface FastEthernet 0/1 router-2621(config-if)#ip route-cache flow router-2621(config-if)#exit router-2621(config)#ip flow-export destination 192.168.9.101 9996 router-2621(config)#ip flow-export source FastEthernet 0/1 router-2621(config)#ip flow-export version 5 router-2621(config)#ip flow-cache timeout active 5 router-2621(config)#ip flow-cache timeout inactive
How to Configuring if I need NetFlow Export more interface?
How to Configuring if I need NetFlow Export more interface? #ip flow-export source FastEthernet 0/1 ?????????? ------------------------------------------------------------------------ router#enable Password:***** router#configure terminal router-2621(config)#interface FastEthernet 0/1 router-2621(config-if)#ip route-cache flow router-2621(config-if)#exit router-2621(config)#ip flow-export destination 192.168.9.101 9996 router-2621(config)#ip flow-export source FastEthernet 0/1 router-2621(config)#ip
Evaluating Netflow analyzer
I am evaluating the Netflow analyzer product. We have a 3745 router with ATM IMA. I have enabled ip route-cache flow on the fast ethernet interface. For the IMA interface, should I enable route-cache. The option I have under Atm0/ima0.111 has only "same interface" . THere is no flow option. On the ATm0.ima0.111 interface, I only see out traffic. No in traffic is captured. Any ideas... Kumar
FrameRelay subinterfaces
Hello, I have Cisco 3640 router with FR and 4 subinterfaces: interface Serial0/0 bandwidth 2048 no ip address encapsulation frame-relay IETF ip route-cache flow logging event subif-link-status frame-relay lmi-type q933a ! interface Serial0/0.21 point-to-point bandwidth 256 ip address 10.250.1.13 255.255.255.252 frame-relay interface-dlci 21 ! interface Serial0/0.22 point-to-point bandwidth 128 ip address 10.250.1.37 255.255.255.252 frame-relay interface-dlci 22 ! interface Serial0/0.23 point-to-point
Ivan
Hi. Whot is it?
polling more than 5 minutes
Hi. I use NetFlow Analyzer eval version. Very usefull tools. But it not give the real results because it make polling every 5 minutes. And I have a problem with some lines when I get avarge less then 50% in Netflow. but when I talk with my ISP, they tell that thare are a lot of piks 1,2 seconds, 1,2 minutes. Brunch office cant work. Is it possible to configure Netflow Analyzer to make polling every 1-2 seconds or 1 minute?
Web Interface Timeout
We are evaluating Netflow Analyzer, looks like a nice tool. But, I'm getting tired of having to log back into the interface all of the time. Is there a way to change the timeout period. Looked through the Admin Operations and couldn't find anything. Thanks Paul Sullivan
Netflow Analyzer... Would you recommend?
We are about to demo this product. For years we have been using products like MRTG to view and manage bandwith. MRTG works fine but is very labor intensive. All we need is a product to give us pretty graphs on utilization without much work. It would also be nice to have a product that can alert us when utilization is high.. or when there are a large amount of port errors. Is this that product? Can you honestly recommend this product?
Dashboard view still slow
Ive increased the key_buffer_size variable in the startdb.bat file to 128MB but the dashboard view is still slow to appear. It takes anything between 10 and 20 seconds. It is faster than before i changed the variable but its still annoying. All other screens appear fast. We have about 100 devices in our list. Any suggestions?
Evaluating Netflow analyzer
I am evaluating the Netflow analyzer product. We have a 3745 router with ATM IMA. I have enabled ip route-cache flow on the fast ethernet interface. For the IMA interface, should I enable route-cache. The option I have under Atm0/ima0.111 has only "same interface" . THere is no flow option. On the ATm0.ima0.111 interface, I only see out traffic. No in traffic is captured. Any ideas... Kumar
Interface Description
Is it possible to have NetFlow Analyzer automatically display the description of the router interface in addition to the interface name that is currently displayed? Seeing the interface description makes determining the function of a particular interface much easier. V/
Version Information
Is there a free version of NetFlow Analyzer? Thanks
Next Page