restarting service cause problem with license
Hi, We recently purchased NetFlow Analyzer license for 2500 interfaces. Applying license went fine, but after we restart the srvice or server the following message appears: Your current license allows only 0 Netflow Interfaces for Attacks. You can either choose limited interfaces you want to monitor here or procure a new licence. Since we could not unmanage all interfaces at once (we have 1350 interfaces) and it can not be removed portion by portion, we had to stop exporting netflow from our network
AS to AS traffic flow
Hi, i have installed NetFlow Analyzer (trial version )for checking the traffic between the source and destination AS ,but in the graph i can see only the destination AS .is there any option to get the source AS in the graph ( configured in a transit AS for getting AS to AS traffic flow) Regards Arjun
Netflow Analyzer does not start
Hi, My netflow analyzer instance stop suddenly, when I try to star its fails: Running ManageEngine NetFlow Analyzer... wrapper | --> Wrapper Started as Console wrapper | Java Service Wrapper Professional Edition 64-bit 3.5.15 wrapper | Copyright (C) 1999-2012 Tanuki Software, Ltd. All Rights Reserved. wrapper | http://wrapper.tanukisoftware.com wrapper | Licensed to Zoho Corporation Pvt. Ltd. for ManageEngine NetFlow Analyzer 9 wrapper | wrapper | Launching a JVM... jvm 1 | WrapperManager:
Netflow plugin update problem
Hi, I've updated opmanager from 9850 to 9900 but I'm not able to update the netflow plugin from 9900 to final version. The update process seems to not install any files and continue to run indefinitely Unable to load Disk Space related native library. Exception in thread "Thread-2" java.lang.UnsatisfiedLinkError: com.adventnet.tools.update.installer.DiskSpace.getFreeSpace(Ljava/lang/String;)J at com.adventnet.tools.update.installer.DiskSpace.getFreeSpace(Native Method) at com.adventnet.tools.update.installer.ApplyPatch.run(ApplyPatch.java:152)
Trouble with ASA & NetflowAnalyzer config
Hi, I am trying to configure netflow to work between an ASA and a PC. On the ASA I have the config in place and via show flow-export counters, I see the counts incrementing. The config is set to send to the PC's IP on 9996. On the PC, I can access the web interface for NetFlow Analyzer and it is also set for 9996. Via Wireshark, I see packets for UDP 9996 hitting the PC. I'm not, however able to add or see any devices in the Netflow Analyzer tool. I tried adding an auto discovery and a direct
Netflow Analyzer - v12 Master Interface Dashboard
Recently I upgraded from Netflow Analyzer v9.6 to v12. In v9.6 I was able to create a master interface dashboard, that showed the in/out utilization of all interfaces on all devices registered within Netflow, in a list format. This was then displayed on a TV in our operations room and had a refresh interval, defined within Netflow, of 1 minute. This quickly allowed us to see if any of our links were being over utilized. In v12 I have had a go at creating a custom dashboard, but I am unable to recreate
top source report - others line ?
Hi all, I am new with the netflow analyzer. I tried to get top source traffic report. however others line is taking %65 of the total. how can I refine this? Is there any setting ? thanks and regards
ManageEngine NetFlow Analyzer 9 is not running
HI I am using CentOS 7 and after installing neflow analyzer the service keep on stopping. As soon I start the service by /etc/init.d/netflowanalyzer start it starts and after a few seconds, if we check the status, the service is not running. Can you tell me if I am missing something
Netflow - Destinations not showing
Hi I am using netflow analyzer version 9. For some reason all of sudden my Destinations tab is not showing any details about users in he network. Please see the attached screenshot. It shows only "unaccounted"
NetFlow Analyzer Distributed Edition version 12 Released
Hi All, We are happy to announce you all that we have released the most awaited version 12 for NetFlow Analyzer Distributed Edition. The Distributed edition is majorly used by organizations that have distributed architecture across the geographic location. In this case you can install Collectors on the various different location and monitor all the collectors using the Central installation in Head Office. What the new Distributed edition solves:- We have introduced our new UI for the Application
Tuning Steps for NetFlow Analyzer Distributed Edition
Hi All, We all know that NetFlow analysis product are resource intensive as it parse the flow records received every second , the product should be tuned in a such a way that it accommodate all the flows received and generate accurate stats. We can increase the performance of NetFlow Analyzer Enterprise Edition by making some minor changes. The performance can be increased by tunning both the JAVA and MYSQL. Since the Enterprise Edition is on a distributed architecture, we have to tune both the
Report in Netflow
Hi, I am exploring scheduled report in Netflow and sent to my email. I was able to receive the report, but I saw this garbage things. How to view this into normal reading? See attached.
Netflow can't get the router name & interfaces name via SNMP
Hi, I am trying to set the SNMP to the interfaces & router to get their name from the devices. It seems that I can't set the SNMP. It always return to NONE. See screenshot below. Thanks!
Devices not showing up on Netflow Analyzer
New installation of Netflow on a Linux Server, V12 both Netflow and OpsManager. OS Name & VersionLinux, 2.6.32-504.30.3.el6.centos.plus.x86_64 OpManager version 12000 (64 Bit) Licensed for 25 Interfaces I was able to add two of my routers, (although they show up as switches?), a Cisco 7301 and a 7304. Added to both Netflow and NCM without issues. Tried adding a couple more and they don't show up? I can run tcpdump on the interface and see the data is showing up on udp 9996. Any ideas on what to look
NFA v12 in OpManager v12
hi Guys, I am new to OpManager, I install OpManager v12 on Windows, does it already have NFA v12 bundle with OpManager v12, no need separately install NFA v12 plugin? Cause I only able to find NFA v11 for download. Regards Thanks...KEN
Headland Layer 7 Application Issues
Hello everybody, I´ve some issues with the version OPMANAGER (12) where I don´t how configure or what I need to see the Layer 7 Application. The netflow is configured Ok in a Switch CISCO 3850, but I need to see thr traffic in Layer 7 Application. Is necessary another configuration in Switch? I read about is necesary AVC, but AVC is only for WLAN not for Wired. Pls some advice or help. Here is how the Layer 7 Applitacion looks like. The configuration for my netflow that works without any problem
Schedule Report per devices not per interface
Hi I am trying out the Netflow analyser for sometime being and I would need some help/enquires. Currently when I schedule the report,it will generate each INDIVIDUAL lreport for each interfaces i had selected. But what i would like is to generate 1 report with all information about the interfaces i had selected inside. How can i accomplish that ? Thanks. P.S I had make a similar question regarding this issues but i cant seem to find the question anymore so i post as a new one.
Missing translation: webclient.license.activation
Hi Team, In my company, we would like to test ManageEngine OpManager Netflow Analyzer (the last version downloadable in the official site). First, I've installed it in a Windows 7 computer and I have no problems. But, then I've installed it in a Windows 2012 R2 server. Once I launch Netflow Analyzer with the shortcut ManageEngine OpManager, I have directly a error message : Missing translation: webclient.license.activation Missing translation: webclient.license.currentlicense undefined Adresse IP
Netflow Analyzer fails to retrieve interface names on Palo Alto firewall
I'm trying to get Network Analyzer to process netflow from a Palo Alto firewall, but NA seems to be unable to retrieve interface names and the volume calculations are completely wrong. Palo Also has advised installing mibs from the following location, but I do not know how to install the mibs. Please advise. https://www.paloaltonetworks.com/documentation/misc/snmp-mibs.html Thanks, -chris
too much Unaccounted
I"m trying to see which IP is the most busy. When look at an ip group with port 80 and 443 Most of the destination traffic is unaccounted. Same thing if check directly on the IP report. Destination Traffic(Total: 645.76 GB) % of total traffic 206.162.145.230 30.59 GB 5% 206.162.145.241 13.48 GB 2% 72.14.162.30 367.54 MB <1% 173.222.236.218 187.45 MB <1% 192.168.20.79 136.67 MB <1% 206.162.145.197
IP Group Creation (NFA v12)
It appears that when an IP Group is created, that it only reports/shows data for this group from the creation time on. It does not seem to analyse the existing data in the database to show historical information for flows coming from sources in the newly defined IP Group. Is this a product limitation or a bug? Thanks Dean
Netflow on Cisco Wireless LAN Controller 2504
Hi, I have configure Netflow on a Cisco Wireless LAN Controller 2504 to send its flows to Netflow Analyzer. I can see the traffic but when viewing the applications, I can only see IP_App and the IP addresses (both source and destination) to be 0.0.0.0 Is there something more to be done? Thanks Thierry
VFA V12 Reports Missing Data
Hi, When we run the scheduled "capacity planning" report the "ApplicationIn Growth" & "ApplicationOut Growth" only show usage data in the first column of each table. The bar chart above each table appears to show all usage data correctly though. Regards Dean
Netflow Destination View of users
Hi I m using the latest version of netflow analyzer. Please tell me where I can set the view of detailed graph view of top destinations interms of users in the network like we used to see in the older versions of netflow.
Problem with Geo IP location in netflow analyzer version 12 free edition
Hi everyone, I'm using netflow analyzer version 12 free edition, I followed the instruction at https://blogs.manageengine.com/network/netflowanalyzer/2010/05/27/location-based-traffic-reports-geolocations-in-netflow-analyzer.html.I downloaded countrycode.zip and extract at /opt/ManageEngine/OpManager/, then I went to System Settings --> Geo Location and Load successfully ,but I dont see any feature like "Show IP Geo location" as the instruction.Can you show me how to enable this feature? Thanks a
invalid tool
I've downloaded and tested the Netflow Analyzer..... what a useless tool..... difficult to install, then once I cleared those (on my own) the tool can't see any netflow devices. I understand it's all about the money, but how about having a working tool as advertised ? I'm constantly flooded with "there are plenty of tools out there" but I have yet to find one that works as advertised.
15K new interfaces visible for a single device.
Hello, I'm able to see 15K new interfaces on a single device. That device is a Cisco router with not more than 6 Interfaces on it. What can be the issue? The configuration on the router is as below ip flow-cache timeout active 1 ip flow-export source Loopback0 ip flow-export version 5 ip flow-export destination 10.1.40.70 9996 Interface FastEthernet0/0 ip flow ingress ip flow egress Regards, Yash
GeoLocation configuration in Netflow Analyzer in FREE Edition - Monitor 2 interfaces
Hi everyone, I'm a new user in Netflow Analyzer tool and I'm trying the free version. I read that the latest version of Netflow Analyzer has supported geolocation configuration but I can't find this feature on the dashboard . I have also read and searched all the things related to this but still get no result.Please show me how can I find it? Thanks a lot
Windows vs Linux Performance
What is about performance of NetFlow Analyzer under Windows and Linux OS? Which OS is better for running NetFlow?
what is the meaning for the Device Traffic in Consolidated Report page?
Please refer to the picture below and help to clarify the question for in red
Question about sizing of collector
We are currently using distributed edition of 11000. Questions: - what is the max flow rate can be handled by 1 collector? with what sort of hardware spec? - When I clicked on <Collectors> link in the Central Server page, I can see that it showed collector details with each collector flow rate. But, when I cick into each individual collector and opened its Flow Rate link, I found the flow rate is differed from the reading in central server. E.g. Central server show collector 1 flow rate is 3077;
NFA ver12 Question
Hi All, Recently I installed the latest version12000 NFA for customer to analysis the traffic. So customer picked the core switch huawei and one cisco core switch to test it. Then we found the NFA still show ifindex interface name after updating the snmp string for huawei switch. And we tried to run snmpwalk.bat to check these ifindex. These ifindex seem not exist. That's so weird. So we tried to edit the system_properties.conf file and add the line "SNMPTargetV2C=true" according to Forum.
Support for Cisco NBAR2 on NetFlow Analyzer version 10.2.5 with Professional-Plus-600 interface license.
Hi All, Hope you are doing well J Hope you'd be able to assist me on a small query below please ? We have purchased a NetFlow Analyzer version 10.2.5 (build number: 10250) running a Professional-Plus-600 interface license. I would like to check if this version supports Cisco NBAR2 exported through Flexible NetFlow on Cisco 4000 series new ISR routers running IOS XE 3.16S. We are running the latest Cisco NBAR2 Advanced Protocol Pack 18.0.0. If yes, is there any NetFlow configuration guide
How can I stop from using large amounts of disk space?
I am running the 11.0.0.1 with a free license. About 4 months ago I found that the Netflow database was very large. I reinitialized it and doubled my disk space (to 12 gb) on the server. Again, the Netflow database is taking up all of my disk space. I am not sure why it's getting so large. Currently, the /pgsql/data folder is taking up over 8GB: /opt/ManageEngine/NetFlow# find . -type d -print0 | xargs -0 du | sort -n | tail -10 | cut -f2 | xargs -I{} du -sh {} 88M ./jre/lib 89M ./jre 173M
Netflow Analyzer 11001, Collector stops
Hi, we have just install the version 11001. It can be run for a few hours, but then collector stops at 12:30. Then we resume the service and it stopped again in around 12hours later. here is the log we found: [23:23:38:916]|[04-23-2016]|[org.apache.catalina.core.StandardService]|[INFO]|[156]: Stopping service Catalina| [23:23:51:010]|[04-23-2016]|[org.apache.coyote.http11.Http11Protocol]|[INFO]|[156]: Stopping Coyote HTTP/1.1 on http-8080| anyone can figure it out the reason behind? Also is
NetFlow Analyser Scheduled Reports
Hi, I have been setting up some scheduled reports in NetFlow Analyser and I can't seem to add any graphs to the scheduled reporting that provides details on the Interface Utilisation. This would be very handy for the end users to see this alongside the application and conversation reports. The report that comes close is the Capacity Report which looks like it can only be run once and not added to a schedule. Is this correct or is there a way to add the Capacity Reports to a schedule? The reporting
Having trouble starting service
After I install and do the run.sh script I get the following, how can I fix these? Yes I don't want to stop services like SSH or TFTP or Syslog and it says those ports are not required, so what gives?: /opt/ManageEngine/NetFlow/bin/.. /opt/ManageEngine/NetFlow/bin/.. Mar 26, 2015 4:59:43 PM com.adventnet.persistence.ConfigurationParser$1 resolveEntity INFO: /opt/ManageEngine/NetFlow/bin/../conf/customer-config.xml doesnt exists, hence it is skipped ----------------------------------------- Port
NetFlow over Cisco EZ-VPN
I have been having issues with getting bi-directional flows over a Cisco EZ-VPN. I found this forum post that explained the issue as well as noted a Cisco Bug. https://forums.manageengine.com/topic/netflow-for-remote-routers-over-ipsec-vpn The Cisco Bug has been resolved. Bug CSCef28662 is a duplicate of the bug displayed below Flexible Netflow export packets not encrypted CSCsk25481 Symptoms: IOS does not encrypt NetFlow export packets which originate from the router itself. This is day 0 functionality
Incorrect Data Flowing in from ASA5505
Hello there, We are receiving incorrect in/out data flowing in from the ASA, Maximum inbound is 60Mbps and Outbound is 10Mbps. But if you could look at the below image you will see the graph shows a spike of 272Mbps OUT speed which is incorrect. Here is the config from the ASA, access-list netflow-export extended permit ip any any flow-export destination inside 192.168.200.11 11265 flow-export template timeout-rate 1 class-map netflow-export-class match access-list netflow-export class netflow-export-class
Netflow Analyzer not working
Hello, I have just installed Netflow analyzer (demo for 30 days) and have this message: "OpManager has detected that it has lost network connectivity and has suspended all monitoring. Monitoring will be automatically resumed once connectivity is established" and nothing works. I tried with win 7 and win 8 and was the same. How can I fix it? Thnaks in advance. Regards.
Next Page