Fluke Recording Equipment manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83

Go to page of

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of Fluke Recording Equipment, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of Fluke Recording Equipment one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of Fluke Recording Equipment. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of Fluke Recording Equipment should contain:
- informations concerning technical data of Fluke Recording Equipment
- name of the manufacturer and a year of construction of the Fluke Recording Equipment item
- rules of operation, control and maintenance of the Fluke Recording Equipment item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of Fluke Recording Equipment alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of Fluke Recording Equipment, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the Fluke service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of Fluke Recording Equipment.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the Fluke Recording Equipment item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    NetFlo w Tracker User’s Guide Version 3.1.3 May 2007 Copyright 2004 - 2007 Fluke Corporat ion. All rights reserved. All prod uct names a re trad emarks of their respective compa nies. w.flukenetworks.com[...]

  • Page 2

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 2 Soft ware License Agr eeme nt This is a legal agre ement between you (“ You”/ “the End U ser””) , and Fluke Cor poration, a Washington corporation, its subsidiaries an d affiliates, incl uding Fluke Netw orks (“Fluke”), with offices at 6920 S eaway Bo ule vard, Eve rett, Was hing[...]

  • Page 3

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 3 If You have pu rchased the m ainten ance and support serv ices from Fluke th en subj ect to payment of the support fees, Fluke shall provide such service s in respect of the Product in acco rdance w ith the pr ovisions o f the Sup port an d Maintenan ce Agreemen t conta ined in Appendi x 1. 3.[...]

  • Page 4

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 4 6 . CUSTO MER REMEDI ES You must call your Fluke representative for an authorization to return any item du ring the 90 day w arranty period referred to in clause 5 abov e, and You w ill be supplied with a retu rn a uth orisa ti on nu mbe r and an a dd ress for retu rnin g th e ite m to ge ther[...]

  • Page 5

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 5 1 1. CONFIDENTIA L INFORMATION AND S ECURITY Durin g and after this Agree ment, the P arties wi ll keep i n conf idence an d use only for the purposes of this Ag reement al l Confide ntial Informat ion. Confidential Informat ion means informa tion belonging or relating to the P arties, their b[...]

  • Page 6

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 6 14.4 If any prov isions o f the Agreem ent are hel d to be u nenfo rceable, illegal o r void in wh ole or in part the remain ing portions of the Agreement shal l remain in full force and effect. 14.5 No part y shall be l iable t o the othe r for any delay or non -performance o f its obligati o[...]

  • Page 7

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 7 Append ix 1 to End User Licence Term s and Conditi ons for Fluke Support and Mai ntenance S ervice 1. De finitions 1.1 In thi s Agreement an d in th e Schedul es hereto, sa ve where th e contex t so admit s or req uire s, the follo wing de fi nit ions s hall h ave the followi ng me anings : ?[...]

  • Page 8

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 8 1.7 The con tents of the Schedu le form an integra l part of this Agreem ent an d shall h ave as full ef fect as if it were in corporated i n the bod y of th is Agreement a nd the exp ression s “this Agreem ent” and “the Agree ment” us ed in the Sc hedule sh all mea n this Agreem ent a[...]

  • Page 9

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 9 5.4 W ithout pre judice t o the generali ty of clause 5.3 and for t he avoidance of doubt, t o the fullest extent pe rmitted by l aw all term s implie d by Sec tions 13, 14 and 15 of the Sale of Goods Act, 1893 are hereby e xcluded and all te rms impli ed by the Sal e of Goods and S upply of S[...]

  • Page 10

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 10 9 . Conf identi al Infor mation and Secu rity 9.1 Durin g and after this Agree ment, the P arties wi ll keep i n conf idence an d use only for the purposes of this Ag reement al l Confide ntial Informat ion. Confidential Informat ion means informa tion belonging or relating to the P arties, t[...]

  • Page 11

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 11 Schedul e Support Servic es 1. Sup por t Hours The Supp ort Hours during wh ich Fluk e shall su pply th e Support Servi ces sha ll be betw een 9.30am and 5pm on Worki ng Days. 2. Sup por t Servi ces Fluke shall p rovide You during the Support Hou rs with: 2.1. techn ical ad vice and assistan [...]

  • Page 12

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 12 Contents INTRODUC TION 15 What is N etFlow ? 15 What is N etFlow Tr acker ? 15 Featu res and Bene fits 15 INSTALLATION 17 Minim um Syste m Requi remen ts 17 Oper ating Syste m Suppor t 17 Pre- installati on C hecks 17 Install atio n on Micr osoft Window s  18 Install atio n on Solar is and[...]

  • Page 13

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 13 LONG-TERM REPORTS 35 Devices and Interfaces 35 P er-device and Per-interface Long-term Reports 35 Filter Editor 35 EXECUTIVE REPOR TS 37 REPOR T UR L FO RMAT 38 General Form 38 Report F ormat P aramete rs 38 Time Range Parameters 42 Filter Pa ram eters 49 Securi ty Par ameters 53 Manag ement [...]

  • Page 14

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 14 I P Application Names 68 DiffServ Names 68 Hostna me Resol uti on Set tings 68 AS Names 69 Subnet Na mes 69 Databa se Se ttings 69 Backup 71 Archiving 71 Memor y Setting s 72 Perfor mance Co unter s 72 APPENDIX 1: D EVICE CONFIGURATION 74 Enabl ing NetF low Exp ort/ NDE on a Ci sco R outer o [...]

  • Page 15

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 15 Introduc tion This d ocumen t is the us er man ual for N etFl ow Tra cker, a sof tware produ ct de signed to collec t NetFlow infor mati on from Ci sco eq uip ment a nd pre sent it in a m eanin gful w ay. T his doc ument doe s not provide a ny a ssistanc e with Cisco equipm ent itsel f. Pleas[...]

  • Page 16

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 16 • Straigh tforw ard URL f or mat for l inking curren t, auto matic ally upd ated ch arts into other app licati ons. • Optimi zed dat abase struc ture ens ures fas t rep ort g enerati on under h eavy l oad.[...]

  • Page 17

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 17 Inst allation Minimum System Requirements The ty pe of system requ ired to ru n NetFlow Trac ker depends on t he number of devices sendi ng NetF low infor mat ion to i t and the amoun t and na ture of tr affic h andl ed by those de vices . The f ollowing requi remen ts are a gu idel ine; the [...]

  • Page 18

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 18 • NetFlow T racker conta ins an embedde d web server. Web se rvers norma lly run on port 80, but this may be in use by anoth er we b serve r on your s ystem. You can choose a different po rt during inst allation o r disable o ther web serve rs prior t o i nstalla tion if y ou wish . • If [...]

  • Page 19

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 19 C ustom Setu p You wi ll only s ee this d ialog if you cho se cus tom set up abov e. You s hould see opti ons for NetF low Tra cker and MyS QL, u nless an unsupp orted versi on of MyS QL was detec ted. To ch ange t he ins tall fold er for ei ther N etFl ow Trac ker or My SQL, cl ick on t he f[...]

  • Page 20

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 20 S et up SNMP co mmu nity stri ngs If any of the devi ces you i ntend m onitor ing do n ot use a read-on ly SNMP comm unity of “public” you will need to add their communities to the list in SNMP Setti ngs . Add listener port s If you in tend m onitori ng mor e than one dev ice it i s recom[...]

  • Page 21

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 21 Using NetFlow T racker Once you have insta lled NetFlow T racker an d configured y our devic es, data will be availab le with in a few minute s. Ther e are many wa ys to acce ss this data. Real-time D ata NetFlow Tracke r stor es up to fourte en days full Ne tFlow data wi th one min ute resol[...]

  • Page 22

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 22 D evice traffic meter s In addi tion to the orde rabl e columns ther e are two grap hical me ter col umns tha t allow you to ins tantl y see w hich d evices are curre ntly b usy. Each chart sh ows you the r ecent peak a nd the cur rent r ate: Each ch art is sc aled re lative to t he busi est [...]

  • Page 23

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 23 Per-AS data If your r outer us es BGP to rou te traff ic it wil l prov ide s ource and d esti nation origin o r peer AS number s in its NetFl ow dat a. NetFl ow Tra cker cre ates op timise d bi- directi onal charts for ea ch AS jus t as it d oes for e ach inter fac e. An AS ch art is only av [...]

  • Page 24

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 24 Z ooming in You can z oom in t o the c hart by cli cking the zo om in butt on on th e toolb ar: This w ill zoom in on the c enter of the c hart. If y ou want t o zoom in on a p articul ar selection, see Selecting a time range below. Note that zooming in will stop the c hart from aut omati cal[...]

  • Page 25

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 25 A lter the fil ter app lied to a s tand ard c hart Most ch arts al low yo u to chang e the ap plie d filter by click the filter e ditor tool bar button : See Creating Filtered Reports for m ore ab out the f ilter editor . View resolved d omain names If a char t shows IP addr ess es se veral o[...]

  • Page 26

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 26 V iew a p ie char t as a s tandar d char t You can view a p ie chart as a ch art over ti me by cl icking the ch art tool bar b utton: Working with Tabular R eports Most charts can be dis played inste ad as a t abular report. Rather than br eaking the sele cted time range i nto s mall ch unks [...]

  • Page 27

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 27 Y ou can cl ick one of thes e radi o buttons to sel ect a row to dril l down i nto. Note that only one row ca n be se lected . To exa mine th e data con trib uting to that row s fig ures, sele ct the type of sub-r ep ort you’d like t o open fro m the dr op down l ist at t he bot tom of t he[...]

  • Page 28

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 28 Report Tem plat es Wheneve r you create a new tabular re port or chart yo u can ch oose a ny of t he standar d rep ort temp late s dep ending on what you want t o exami ne: Address Reports • Source Address es – shows the IP add ress es that w ere the source of most traffi c or packe ts. ?[...]

  • Page 29

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 29 • So urce Endpoi nts – shows the IP addre sses and c orrespo nding a pplicati ons that were the source of mos t traffi c or pac kets. The top source en dpoin ts inwar ds on a link a re the rem ote servic es usin g you r bandwidth . • Des tinati on End points – sho ws the IP addresse s[...]

  • Page 30

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 30 • VPNs – sh ows th e VPNs wit h mo st traffi c or pack ets. Int erfaces m ust be associa ted w ith VPNs in Device Settings for this r eport to f uncti on. • Nex t Hops – shows the nex t-hop add ress es that r eceive d most traffi c or packe ts. Note tha t only a router can sup ply a n[...]

  • Page 31

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 31 S ample Size NetFlow Tracke r pic ks an op timal s ample s ize for a real -time ch art base d up on the amoun t of time c overe d; you can over ride this by s electing a numbe r of uni ts. For exampl e, you ca n crea te a re port c overing a day w ith each samp le bein g an hour lo ng. So urc[...]

  • Page 32

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 32 O ut In terf ace The out i nterf ace fil ter res tricts a r eport to just o utbou nd traffi c fro m a set of interfa ces. Used in combinati on wi th an in in terfa ce fi lter it w ill re port on traf fic th at took a par tic ular pat h throug h a rout er. In/O ut Inte rface The in/ out inter [...]

  • Page 33

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 33 R ecognised Application This fi lter s elects tr affic w ith the g iven s ource or des tinati on app lication . Wh ether th e source or destin ation appl ication i s cons idere d depend s on whet her it has a name defined in the IP Application Names settings pa ge, or if bo th o r neithe r ha[...]

  • Page 34

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 34 D es tinati on Subne t This fi lter se lects traf fic w ith the g iven de stinati on s ubnets. Note t hat a des tinati on subnet f ilter o f 224. 0.0.0/ 4 wil l sele ct multicas t traffi c. So urce/De stina tion Su bne t This filter s elects traffic to or fr om the given subne ts. So urce Mas[...]

  • Page 35

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 35 Long-te rm Repor t s Long-ter m rep orts all ow you t o look a t data ove r much lo nger time ran ges t han is poss ible w ith the stand ar d real- time dat abase. The data f or long -term r epor ts is s ummari zed in ad vance so a long -ter m report ov er sever al days or weeks can ofte n be[...]

  • Page 36

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 36 I f you sele ct a per -dev ice, pe r-inb ound inter face or per -outbound inter face r eport yo u must al so spe cify wha t dev ice or in terface to rep ort up on. The ed itors for sel ecting a device or interface are slightly different to their counterparts in the real-time Filter E ditor i [...]

  • Page 37

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 37 Executive Re port s An exe cutive report i s a pre -defi ned templ ate th at cont ains on e or more char ts or tabul ar repor ts. Exe cutive rep orts can be cr eated to show related infor matio n on one p age and to allow quick a ccess to comm only- used r eports. Executi ve reports a re defi[...]

  • Page 38

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 38 Repor t URL For mat You can e asily g enera te your ow n URLs or modif y auto maticall y crea ted one s for us e in networ k manag emen t por tals favo urites lists . General Form http://<server>:<port>/report.jsp?prm=value&prm=value... server The domain name or IP addr ess of[...]

  • Page 39

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 39 0023 Next Hop s 0 024 S ource Address Dissemination 0025 Destination Address Popularity 0026 Recogn ised Applica tions 0027 Traffic Cl ass es 0028 Identified Applications 0029 Bi-direct ional Address Pa i rs 0030 Bi-direct ional Conversat ions 0031 Bi-directional AS Pairs 0032 Bi-directi onal[...]

  • Page 40

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 40 n records – specifie s the n umber of rows to show per page of a t abular report. <number> The number of rows per p age -1 Show all rows others – specifies t hat a tabu lar repo rt shows an “others” row inst ead of a page navig ator. N ote that l ong- term tab ular re ports alwa[...]

  • Page 41

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 41 s ections – sp ecifies the rep ort secti ons to output. The sections, formed by summing the values for each section 1 Title 2 Time range & filter description 4 Main rep ort or chart bod y 8 Chart ti tle, if applicab le 16 Chart leg end, i f appli cable <sections> 32 Result inf orm[...]

  • Page 42

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 42 f ormat – sp ecifies the outp ut form at of the r epor t or char t. html Fu lly interact ive HTML ( default ) print Printable/saveable HTML csv Comm a separ ated val ues r eload – specifies t he number of sec o nds bet ween automat ic ref reshes o f the repo rt. This i s bes t used in co [...]

  • Page 43

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 43 C alendar-based (simple) A simple calendar-based time range is a given number of units ending either when the repor t is ge nerated or at the en d of the l ast ful l unit b efore the repor t is g enerated . unit – specifies the unit to m easure the time range in. hour Hours day Days week We[...]

  • Page 44

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 44 Cale ndar- based (adva nced) An adv anced cal endar -ba sed time range has an op tional start d ate sp ecified as a g iven number o f uni ts befor e the ti me of rep ort ge nerati on, defaul ting to the da y of re port generation. The start time is specified in plain text. The optional end da[...]

  • Page 45

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 45 e date_nunitsago – (optional) specifies the numbe r of units before the time of report gener ation of the last d ay of the time r ange. 0 The las t day of t he time range w ill b e the firs t day of th e unit follow ing the curren t unit at t he time of repor t gen eratio n 1 The las t day [...]

  • Page 46

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 46 S peci fying a time z one By def ault the ti me zon e used to inter pret cal enda r-bas ed time ranges and time -of- day masks is the ti me zone of the Ne tFlow Tr acke r serv er. You c an spe cify a no n-defaul t time zone if you wish. Note tha t if a lo ng-ter m rep ort has a config ured ti[...]

  • Page 47

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 47 115 (GMT+ 02:00) B uch arest 1 20 ( GMT+02: 00) Cai ro 140 (GMT+ 02:00) H arare, Pre toria 125 (GMT+ 02:00) He lsin ki, Ky iv, Rig a, Sofia, Tallinn, Vilni us 135 (GMT+02:00) Jerusalem 158 (GMT+ 03:00) B aghd ad 150 (GMT+ 03:00) K uwai t, Riy adh 145 (GMT+ 03:00) M osc ow, St. P etersb urg, V[...]

  • Page 48

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 48 285 (GMT+ 12:00) F iji, Ka mch atka, M arshall Is. 3 00 ( GMT+13: 00) Nuk u'alofa Specifying t h e chart sa mple size W hen yo u crea te a real- time ch art the syste m choos es a sam ple si ze that w ill cr eate as close to 150 s amples over the full w idth of the char t as pos sible . [...]

  • Page 49

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 49 s ample – sp ecifies the sourc e long-te rm d ata to us e 10minute Daily data (ten minute samples) wil l be used 1hour Weekly data (one hour samples) will be used 6hour Month ly data (six hour sam ples) will be u sed 12hour Quar terl y data (tw elve hour sam ples) will b e used 1 day Half -[...]

  • Page 50

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 50 i nvpn – sp ecifies a VPN that t he inp ut inter face m ust be p art of. <name> The VPN name; see Device Settings for more i nforma tion <id> The VPN identifier outvpn – sp ecifies a VPN that the outp ut interf ace mus t be par t of. F ormat as for invpn above. vpn – sp ecif[...]

  • Page 51

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 51 d stappl – sp ecifies an accept able d estina tion IP appl ication. Forma t as for srcappl above. dstappl_exclude=true – specifies that the supplied destination a pplications are exclud ed rath er than includ ed. appl – sp ecifies an accep table s ource or destin ation I P appl ication.[...]

  • Page 52

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 52 d s – speci fies an acce pta ble di fferenti ated ser vice codepoin t. <name> The assigned name of the codepoint <code> The six-digit binary representation o f the codepoint <byte> The value of the entire Type-of-Service byte, in the r ange 0 - 255 ds_exclude=true – sp e[...]

  • Page 53

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 53 d stnet – specifies a n acceptable destinat i on subnet . Format as for srcnet abo ve. dstnet_exclude=true – s pecifie s that the s uppli ed des tinatio n subne ts are exclud ed rather th an inclu ded. net – sp ecifies an accept able s ource or de stina tion s ubnet. Format as for srcne[...]

  • Page 54

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 54 Management Port al Access Control Paramet ers NetFlow Tracke r allow s manag emen t port als to set up res tricted ac cess to the s ystem for mul tiple users. So long as it is poss ible to conc eal the i nitial URL se nt to Ne tFlow Tracke r it is p ossib le for th e user to f ully in terac t[...]

  • Page 55

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 55 a clid – sp ecifies a permitted long-t erm re port. null No long- term r eports are p ermitted <id> A permitt ed long-term report; see id in Re port Form at Parameters above f or per mitted val ues aclcid – specifies a permitted exec u tive r eport. null No executive reports are per[...]

  • Page 56

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 56 29 VPN 3 0 I n VPN 31 Out VPN aclfeatures – specifies the permitted int eractive report features. The fea tures, forme d by summi ng the value s for each f eatur e. 1 Navig ation Me nu 2 Select All button, if applicable 4 Zoom In butto n, if app licab le 8 Zoom O ut but ton, if app licab le[...]

  • Page 57

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 57 Performa nce T uning There are several factors that influence how quickl y a given report is generated: Disk Speed The first step in creating a report is reading th e raw data from disk; increasing the speed of t he disk subsystem will make repo rting faste r. A high- quali ty serve r RAID c [...]

  • Page 58

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 58 Config uration G uide To open a ny of the setti ngs pages , click “Se ttings” on the main p age. If you have pass word p rotecti on ena bled y ou may hav e to logi n as an ad minis trativ e us er to see t he link. Each s etting s page controls a sing le asp ect of the s oftwar e; if yo u [...]

  • Page 59

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 59 Device S etting s Device List This p age all ows you to check th e stat us of a kn own d evice and overr ide the interfa ce descriptio ns and speeds o btained fro m i t. The na me and ad dres s of each known d evice i s lis ted, alon g with an i con ind icati ng its status ; an excl amatio n [...]

  • Page 60

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 60 I f you are unable to chan ge the c onfigur ation of the router or s witch , or if an interf ace is asyn chronou s, you can override th e descript ion or inwards and ou twards speed used in report s here. You can a lso supply inte rface descript ions and speeds fo r a non-SNMP c ompat ible de[...]

  • Page 61

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 61 V PNs NetFlow Tracke r can as socia te an i nterf ace on a d evice with a VP N for re porti ng and filter ing. A ny numbe r of in terface s on any n umber of dev ices can b e associ ated with a sing le VPN, an d their tr aff ic will be gr ouped tog ether in the VPNs repor t and by the V PN fi[...]

  • Page 62

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 62 Management Port al Settings I f you wis h to use a m ana gement p ortal t o set up res tricted a ccess t o NetFl ow Tr acker for mul tiple users yo u mus t first r egiste r it with NetFlow Tracker . Pleas e see Manag ement Por tal Ac ces s Control Param eters under Report U RL For mat for mor[...]

  • Page 63

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 63 Report S ettin gs This p age lets you con figu re vari ous value s affe cting the way rep orts a nd char ts appe ar in NetFlow Tracker. • Rows per tab ular r eport p age is the numb er of ro ws s hown on ea ch page of a tabul ar repor t. Note that the device and inte rface s tatus repor ts [...]

  • Page 64

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 64 S aved Filt ers Saved filters can be defined that can be added wherever a filter editor appears in the softwar e. A s aved fil ter al lows you t o att ach a nam e to, for examp le, a ti me-of- day mask or a filter that sel ects tr affic r elated t o a part icular m ulti-p ort app lica tion or[...]

  • Page 65

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 65 A lso note that any filters passed to the executive r eport are applied to the sub-reports in conju nction w ith w hate ver fi lters the y have t hemse lves . Pleas e be care ful abou t using unfil tered su b-report s as they will be ac cessible fro m the Exec utive Re ports homep age w ithou[...]

  • Page 66

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 66 An Example Exe cutive Report – Top Applications Today an d Thi s Week This r eport co ntains two s ub repo rts, one showing top ap plica tions f or a dev ice over the last 24 hours and the other ov er 7 da ys. The reports are show n as pie and time charts , and HT ML cells are used to an no[...]

  • Page 67

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 67 T he four th row c onsists of a si ngle s ub-re port cell containi ng the chart le gend for the firs t sub-re port. N o inter active c ontrol s are s upport ed. Si mply se lect “Tod ay” as the repor t, “Leg end” as the onl y secti on, and d eselec t all con trols. Don’t fo rget to m[...]

  • Page 68

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 68 IP Application Names NetFlow Tracke r recei ves appli cation info rmati on in the for m of a pro tocol nu mber and port nu mber. These cor res pond d irectly t o speci fic ne twork ap plicati ons. M any are predefined (well-known ports) w hile others (registered ports) are defined by the soft[...]

  • Page 69

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 69 AS Names T his page le ts yo u assign na mes to AS numbers appea ring in reports. AS numbers below 34 8 16 are a ssigned by several a gencie s; NetFlo w Track er comes with many o f these ASs already named. Numbers between 3 4816 and 64511 are held by the IANA a nd should no t be used. Number[...]

  • Page 70

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 70 • Stor e real- time d ata for allows you to ch ange th e numbe r of da ys full r eal-ti me dat a is stor ed for. You can re duce t his to s ave dis k spac e, or in crease i t if you ar e sur e you have enough free sp ace. • Stor e 10 min ute, 1hour, etc. l ong- term d ata for allows you t[...]

  • Page 71

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 71 Backup NetFlow Tracke r can b ack up its con figura tion, and op tionall y its long -ter m and real - time da tabas es, to a n ominate d fold er on de mand or on a sc hedule . The c onten ts of the fo lder are erased before the backup, so ensu r e that y ou move sche duled backups to long- te[...]

  • Page 72

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 72 Memory Settings N etFlow Tracker uses a s mall amount of memor y dur ing its normal opera tion. You c an control this amount b y chan ging the value s here, but it is not like ly to be neces sary. Note tha t it is p ossib le to p reve nt the sof tware fr om wor king by s etting inap propr iat[...]

  • Page 73

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 73 U nprocessed Flo wsets NetFlow vers ion 9 flow s are encoded i n a flexi ble ma nner usin g temp lates that are exported by the rout er every few seco nds. For a period afte r starting NetFlo w Tracke r or after a r oute r reb oot, flow s may be receiv ed wit hout NetF low Tracker know ing ho[...]

  • Page 74

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 74 Appendix 1: De vice C onfigur ation This is a brief gui de to se ttin g up NetFlo w on various ty pes of devi ce. Not e that if your device isn’t listed here it does n ot mean it is not support ed by NetFlow Tracker; please a sk your devi ce vendo r for a guide t o enabl ing NetFlow. Enabli[...]

  • Page 75

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 75 i p flow-cache timeout active 1 This b reaks up long-l ived f lows i nto one-mi nute s egme nts. ip flow-cache timeout inactive 15 This ensures that flows that have finished are exp orted in a timely manner. interface <interface> ip route-cache flow or ip flow ingress or ip route-cache [...]

  • Page 76

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 76 E nabl ing NetF low Expor t on a 400 0 Serie s Swit ch The 400 0 and 4500 se ries switc hes require a Super visor IV with a NetFlow S ervices daught er card (WS-F 453 1), or a Sup ervis or V, an d IOS v ersi on 12.1(19) EW or above to su pport Net Flow. First c onfigure the de vice a s for an[...]

  • Page 77

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 77 m ls flow ip interface-full mls nde interface or mls flow ip full If you hav e a Super visor E ngine 2 or 720 runni ng IO S versi on 12.1.13( E) or higher the firs t two co mmands are req uired t o put i nterf ace and r outing inform ation i nto the NetFl ow Expor ts. Thi s infor mat ion is u[...]

  • Page 78

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 78 Con figuri ng ND E on a CatO S Dev ice A layer 3 switch running Ca tOS appea rs as two de vices; t he MS FC can be co nfigu red to exp ort Ne tFlow infor matio n on al l the pa ckets it route s by f ollow ing the ins tructio ns for conf igurin g an IOS device above. In privileged mode on the [...]

  • Page 79

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 79 Configuring Ne tFlow Input Filters f or Traffic Class Repo rting IOS ver sions 12.2( 25)S, 12.2(27) SBC and 12.3(4 )T and gr eater supp ort th e NetFlow Input F ilters feature , whic h can be us ed by Ne tFlow Tracke r to re port up on t he traffi c class used to ro ute e ach flow . flow-samp[...]

  • Page 80

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 80 T o ensure that NetFlow Tracker receives enough information from the device you must ensure that the “Loo k Communi ty Str ing” con figur ed i n the “SNMP ” page is one of those se t up in SN MP Settings , and you must set “ Packe teer- 0 Packe ts” to “ on” in the “ system v[...]

  • Page 81

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 81 Using sflowtool to Convert sFl ow Records to NetFlow NetFlo w Track er does not dire ctly s uppor t devic es which expo rt sFlow records; howev er, the d evelop er of sFlow provi des a tool t o conver t sF low re cords to NetFlow record s, avai lable at h ttp: //www .inmon. com/ techn ology/s[...]

  • Page 82

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 82 Appendix 2: CS V File F ormat Every s tandar d char t and tabul ar r eport c an be con ver ted to com ma-sep arat ed-v alue format f or imp orting i nto a d atabas e serv er or s preadsh eet. Chart CSV format Each se ction is separ ated b y a row of “ =” sign s. The fi rst se ction is th [...]

  • Page 83

    User’ s Guide – versio n 3.1 .3 NetFlo w Track er 83 Appendix 3: Thi rd Par ty Sof tw are Componen t s This p roduct i ncludes soft ware d evel oped by the Apache Softw are Fou ndatio n ( http: //www. apache .org / ). This p roduct i ncludes soft ware d evel oped by Advant ys ( http: //ww w.adv antys .com ). Jak arta L og4j NetFlow Tracke r inc[...]