IP Groups have double the site-to-site traffic
For our MPLS network, I have created a few IP groups to help identify traffic flows going from our head end MPLS router to specific sites. The traffic displayed at a devices view (say the router) shows correct, however the IP groups seem to show double the traffic (exactly). I have verified that ip ingress is configured correctly on the end devices (as stated above, my devices show the right bandwidth). So basically, if I create an IP Group from Site A to Site B, it may show that a 1000kbps peak,
Server 2008 host, Remote SQL 2005, Netflow Prof build 7591
Hi I have installed Netflow Professional build 7591 on a Server 2008 (std) VM, seemed to install fine. I have made no changes, not even logged onto it yet. I want to configure it to use a remote MSSQL 2005 (std) database, rather than the local mysql db, and have followed instructions as best as possible from http://www.manageengine.com/products/netflow/configuring-mssql.html. This is the output from the cmd window: User dir C:\AdventNet\ME\NetFlow\bin jboss dir .. The server address is Mysql 127.0.0.1
ManageEngine Netflow - How do I search for traffic by domain name or text string?
How can I produce a source, destination, or conversation report on the screen of all the endpoints that, say, contain the string llnw? I can only see how to search by IP. Thanks. Debbi
Language Problem in NFA6
Hello, we just installed version 6 of NFA and noticed that we cannot change the language. As well the german umlauts are not displayd. Please see attachment for details. Tank you. Chris
No Out Traffic on Nortel ERS 5510
Hi, I have a number of Nortel ERS 5520 switches which are capabile of ipfix. I have all the interfaces managed includeding those not active and i have enable flows on all ports including the trunk ports. I am aware that this is required if you want Netflow Analyser to show the out traffic on an interface. Dispite having this in place i cannot see any out traffic on any interface, is there something i am missing? Anyone have the same issue?
Generating specific reports using MSSQL
Hello, Currently we are running weekly and monthly reports showing average bandwidth utilization per interface. Those reports are generated authomatically and are stored as .pdf files. I was asked if we could use our current MSSQL server, which stores all Netflow data, to run queries against. For example, my manager would like to run a query for a specific device for a specific timeframe. He would like to see what router "A" serial interface S0/0 utilization was for the first week of August, then
IP group / All group / Input and ouput traffic % based on total traffic used instead of link bandwitdh
Hi, I am currently trying MNA 7.5 pro to monitor 2 Gbs Internet access. I created several IP groups with most hungry bandwidth users. When clicking on "IP group / all groups" the input and output traffic is based on the link bandwidth. Would it be possible to have it based on the used bandwidth ? Won't it be more interesting to know than an IP group represent 40% of the used bandwidth whereas it represent 6% of the 2 Gbits link bandwidth ? Anyway, your tool if very interesting. (and easy to install
What does the "Redirect last 2hr to Aggregated" in Storage Settings do?
Cisco 6500 L2 flows
Hi, I'm testing Netflow Analyzer (NA) and have a problem only with one device. I've got Cisco Catalyst 6500 with Supervisor Engine 720 10GE. That Supervisor supports IP flows in Layer 2, but NA didn't receive any L2 flows. My configuration part of the cisco is bellow. mls aging long 64 mls aging normal 120 mls netflow interface mls flow ip interface-full mls nde sender version 5 mls sampling time-based 64 ip flow ingress layer2-switched vlan 2,10-11 ip flow export layer2-switched vlan 2,10-11
Alert profiles & IP Groups
Hi, We are evaluating NetFlow Analyzer and are trying to set alert profiles up for IP Groups. We have setup an IP group, including speed, and want to setup an alert profile for that group to tell us when its combined in/out bandwidith utilization exceeds 90%, and another alert profile for that group to tell us when its combined in/out SMTP bandwidith utilization exceeds 60%. Can you also tell me what version of SNMP the traps are using? Thanks in Advance
Interfaces Not Found
i have configured all interfaces on 4 routers to export flows , unfortunately not all interfaces were recognized by the netflow ! i have no idea why would that happened specially after i have put the same commands on all interfaces !
Linux Router expoerting netflow/sflow - problems setting traffic directions
Hi all, We're currently testing NFA in a simple setup. We have a linux router configured with two interfaces: eth0 & eth1 eth0 (ifindex2) is the external interface providing internet access to a local lan connected to eth1 (ifindex 11). eth0 performs SNAT (masquerade) on all outgoing connections coming from eth1. (and DNAT the other way around) The setup looks like this: Internet - eth0 - eth1 - local lan We've played with several netflow/sflow agents: "fprobe", "fprobe-ulog", "softflowd" and "sflsp"
How to delete data from IP Groups for perticular Period
Dear All, We have installed Netflow Ananyser 7.5 i have 400+ IP Groups configured on teh server , and within month HDD 350 GB is about to FULL can any one suggest how to delete data from IPGroups configured for specified time ??
Adjusting time till data is loaded into mysql.
I have a custom monitoring solution that uses the data stored within the mysql database and has been working great. But the 10 min delay between raw data importing into Mysql has been causing us issues. Is there any modifications that can be done to adjust or even remove this delay (performance issues aside)?
Netflow Analyzer 7 Professional Post Crash Problem
We currently have Netflow Analyzer 7 Professional running on a windows 2003 R2 SP2 server. A couple of days ago we discovered that Netflow had crashed. When you tried to access the Netlfow Analyzer web-console you got an "Apache Tomcat 404 error". Starting the Netlfow Analyzer console from the servers start menu shortcut caused the browser to hang and not display a window. The "ManageEngine Netflow Analyzer 7" service was still running on the server and we were able telnet to the Netflow web-server
"Jump To" Link not working on Neflow after changing Opmanager from HTTP to HTTPS
Dear Support Team, Ever since chaning the Opmanager from HTTP to HTTPS, the "jump to" link from Netflow Server to Opmanager no longer works. When clicking on the button, the link refers to null://nms.xxx.eu:443/overview.do?selectedTab=Home. How can I remote the null and change it to https so that this link finally works again? Regards Mathias
Intrusion Protection
Has anyone used Netflow Analyzer as a tool for detecting intrusions? if so, how did you configure it and what are you looking for.
Sampled NetFlow support now in NetFlow Analyzer 7600
Hi, For all those who have been looking for NetFlow analysis using sampled NetFlow, NetFlow Analyzer now supports the same by just applying a feature pack file. Sampled NetFlow supported devices analyze only 'N' number of packets depending on the sampling rate set and sends this NetFlow packet for analysis to the NetFlow Analyzer.Please visit the following link to know more about sampled NetFlow: http://www.cisco.com/en/US/docs/ios/12_0s/feature/guide/12s_sanf.html This feature can be supported on
utilization too low
Hi, I am trying the netflow analyzer with the trial version. Our router is from our ISP, so there´s no way to get flows from that. I have set up the analyzer to collect data from the HP switch that connects to the router. Now it seems that I only get half the traffic. If I up/download 10MB file, the analyzer only shows 5MB of traffic. The switch is set up with the tools provided by Netflow analyzer. Do you have any ideas on how to make it more accurate?
Nortel stack IPFIX conf
not able to configure IPFIX on nortel 5530+5520 stack
Resolve DNS not working
I have Netflow Analyzer EE 6.5.0 (build 6501) recently installed on a W2K3 server. When I drill down into a interface to view the specific traffic I am presented with a button 'Resolve DNS'. When I press this the page refreshes but the IP addresses do not resolve to names. I can manually resolve the names from a command prompt on the same server. Any thoughts? Thanks
web page time difers from linux or routers!
Hello it is some strange issue i encountered with new install(7.5) routers time: 14:34:28.487 CDT Tue Aug 11 2009 netflow server(debian 502) bios time = os time: Tue Aug 11 14:34:44 EEST 2009 www servers interface view las hour: End Time : 2009-08-11 13:34 one more strange thing when i look at admins/users logins it shows the right time im guesing that this ocured as i first isntalled NA only then i sunced my times... Dalius
tcpdump shows traffic from routers and web interface working but stating no flows being received
New Linux install New Netflow install on 29 day trial Machine is receiving flows Machine is stating now flows being received? iptables if off Any pointers Gary
Netflow, display more than 15 minutes worth of flows.
Hello all, for some reason, my graphs started showing only 15 last minutes worth of data. Not sure what setting made it this way, but below are my storage settings. Can something be changed? I have plenty of hard drive space where the flows are stored. Thank you Dmitry. Flow Rate in the past 34 Hours :39 per second Based on the current flow rate and the available free disk space this value can be set to 1 Week Retain raw data : 1 Hour 2 Hours 6 Hours 1 Day 3 Days 1 Week 2 Weeks 1 Month Send email
Lost Password
Hello! Im using NetFlow Analyzer, and i forget password from my account. Can u help me with recovering? All of my OS services are working fine and i dont have any problem with them. I realy forget my password. I can reinstall NetFlow Analyzer, but whether it will be possible to use old NetFlow bases?
RADIUS Authentication has stopped working with version 7.5?
Apologies for double posting this but for some reason this got posted in the ADAuditPlus forum, no idea how I managed that but obviously it should be here in the NetFlow Analyser forum.... I have just installed version 7.5 to test and it appears radius authentication no longer works. I tested Radius sucessfully with version 7 and a Windows 2003 IAS server and it worked and the setup was pretty simple. I have replicated the same configuration and with 7.5 and it doesn't work - the NetFlow server
how to store info more then 1 month
Hi, everybody. I install NetFlow Analyzer 7, i configured it and do all i need, but when i saw in Storage settings i found, that i can store info about netflow only during month. Am i correct understanded? What happend after month: program finish work or i lost my info? What can i do if i want to store info during year i see it in programm?
How to get data from Cisco device to netflow analyzer server and what type of data stored in netflow analyser server?
Please help me, I just installed manage engine netflow analyzer 7 but I don't know how to get data from Cisco device to server and what type of data stored in netflow analyzer server. Can you show me?
Netflow Analyzer 7.0 - High database disk space
I´ve netflow analyzer 7.0 and MySQL Database is nearly 80GB. Is there an easy way to reduce the size of this? Thanks
Router Time not in sync
I am receiving error messages that indicate my router and my server time are not in sync. My server and my routers are syncronizing from the same NTP server and the time settings as recommended in the setup-cisco-netflow.html#timesettings file are properly configured. When I show clock on my routers, they are the same as on my Netflow collector. What else may be causing this?
Apply Service Packs in Linux text mode
How do I install service pack in linux non graphical mode?
CBQoS gpaphs disappears
Hello! We are finally upgrading our license to version PLUS, and after several days of the use we have found one problem. CBQoS function graphs works very strange. After NFA starts everything works but after some hours a graph disappears and at screen displays �No data available�. If I restart netflow analyzer service after several minutes� graphs appears again. How solve this problem?
Ubuntu 9.04 64bit installation (doesn't install)
./ManageEngine_NetFlowAnalyzer_7002.bin -console
InstallShield Wizard
Initializing InstallShield Wizard...
Searching for Java(tm) Virtual Machine...
.
Preparing Java(tm) Virtual Machine...
..................................
...................................
...................................
...................................
...................................
...................................
...................................
...................................
.......root@server:~# Is
Maximum Utilization above 100% - Internet Link
I am trying to track down an issue with NFA and a Cisco 3825 router that we use for our perimeter router. Ever since we have installed NFA 7, we have always ran into issues with the perimeter router reporting traffic above 100% for link utilization. I have had it report sometimes between 180%-200% utilization (over 10M) even though this is not even possible. It seems to be all inbound traffic. I have verified that the link speed is correct (discovered by SNMP, 6144000, 4x T1's in a multilink
Big Folder Size
Hi everybody, We are using Netflow Analyzer 7 Pro. I have a problem with big size of files in "AdventNet\ME\NetFlow\mysql\data\netflow\" folder. There are .myd .myi .frm files for every day in the period of 2 months. This folder size is aproximately 50 GB. I think these files are log files. I dont need logs which are older than 2 or 3 weeks ago. Can i delete this files with just Delete or i must delete those with tool or any command. Thanks.
Site names
It would be useful to have a seperate field for site name. This can be done using the device host name but having a seperate entity for site name and linking that to the device name offers greater flexibility. It also stops the site being overwritten when sombody does an snmp update
Problem starting server after incorect shutdown JVM
Can somebody help? Working linux server with NFA (NetflowCentral) was shutdowned by "shutdown -h now" and later turned off after unexpected hangup in shutdown state. After that trying to start NFA I get: /opt/AdventNet/ME/NetFlowCentral/bin# ./run.sh JAVA_HOME : ./../jre SERVER_HOME : ./.. DATE : Срд Июл 8 12:10:31 MSD 2009 Starting Server from location: /opt/AdventNet/ME/NetFlowCentral Problem while Starting Server !! System going to Shutdown --- received process interrupt Shutting down
List internal subnets and categorize conversations
One of the few things I liked about NTOP was the ability to list all of your internal subnets and then categorize conversations on whether both source and destination were in that internal list or not. Essentially you could see what traffic was going outside of your network. I think this needs to be an option. I'm evaluating NFA for the billing function, but I need to exclude traffic from our hosting customers to our monitoring and backup servers; all I'm concerned about is their bandwidth to
NetFlow Analyzer 7501 release...
Hi everyone Hope you liked the new features in 7500! If you haven't already upgraded to 7500, you can do so here. And 7501 is here! 7501 comes with new features and is also an fix for the 7500 issues. Following are the features and the fixes: Features: IP groups can be viewed in the network snapshot page. Interfaces without an IP address and without NetFlow exporting capability can be monitored for QoS policies if their respective routers are CBQoS enabled. Fixes: The interfaces were not listed in
NetFlow Analyzer 7501 release...
Hi everyone Hope you liked the new features in 7500! If you haven't already upgraded to 7500, you can do so here. And 7501 is here! 7501 comes with new features and is also an fix for the 7500 issues. Following are the features and the fixes: Features: IP groups can be viewed in the network snapshot page. Interfaces without an IP address and without NetFlow exporting capability can be monitored for QoS policies if their respective routers are CBQoS enabled. Fixes: The interfaces were not listed in
Next Page