Fluke Recording Equipment User Manual
Fluke Recording Equipment User Manual

Fluke Recording Equipment User Manual

Fluke corporation recording equipment user manual
Table of Contents

Advertisement

Quick Links

NetFlow Tracker
User's Guide Version 3.1.3
May 2007
Copyright 2004 - 2007 Fluke Corporation. All rights reserved.
All product names are trademarks of their respective companies.
w.flukenetworks.com

Advertisement

Table of Contents
loading

Summary of Contents for Fluke Recording Equipment

  • Page 1 NetFlow Tracker User’s Guide Version 3.1.3 May 2007 Copyright 2004 - 2007 Fluke Corporation. All rights reserved. All product names are trademarks of their respective companies. w.flukenetworks.com...
  • Page 2: Software License Agreement

    Product enabled by that key solely for the purpose of evaluation, and the Product will cease to function seven (7) days from enabling (or after such longer period as may be agreed by Fluke and confirmed by Fluke or your Reseller in writing), at which time the licence grant for that Product also ends.
  • Page 3 (“Warranty Period”). The warranty for any hardware accompanying the Product shall be as stated on the warranty card shipped with the hardware. If, within the Warranty Period, You notify Fluke of any defect or fault in the Product in consequence of which the Product fails to perform substantially in accordance with its...
  • Page 4 Party giving full particulars of the breach and requiring it to be remedied. You shall be obliged to notify Fluke in writing of any change in the control or ownership of the End User and Fluke shall be entitled forthwith to terminate this Agreement by written notice.
  • Page 5 Agreement or any part of your rights or obligations hereunder whether in whole or in part save in accordance with this Agreement and with the prior written consent of Fluke and You shall not allow the Product to become the subject of any charge, lien or encumbrance of whatever nature.
  • Page 6 User’s Guide – version 3.1.3 NetFlow Tracker 14.4 If any provisions of the Agreement are held to be unenforceable, illegal or void in whole or in part the remaining portions of the Agreement shall remain in full force and effect. 14.5 No party shall be liable to the other for any delay or non-performance of its obligations under this Agreement (save for your obligation to pay the fees in accordance with clause 1) arising from any cause or causes beyond its reasonable control including, without limitation, any...
  • Page 7 Save as provided for elsewhere in this Agreement, this Agreement including the Schedule represents the entire of the understanding of the parties concerning the subject matter hereof, viz, the provision of support and maintenance services by Fluke to You, and overrides and supersedes all prior promises, representations, understandings, arrangements, agreements, letters of intent or heads of agreement concerning the same which are hereby revoked by mutual consent of the parties.
  • Page 8 You shall pay the Support Charges to Fluke annually in advance. The Support Charges shall be paid within 30 days after receipt of Fluke’s invoice thereof. No Support Services will be provided until payment in full has been received by Fluke. In the event of late payment, interest...
  • Page 9 (including legal costs) incurred by or taken against Fluke as a result of the negligence, fault, error, omission, act or breach of You or of your employees, staff, contractors, agents or representatives or for any breach of this Agreement whatsoever by You.
  • Page 10 Agreement or any part of its right or obligations hereunder whether in whole or in part without the prior written consent of Fluke. Nothing in this Agreement shall preclude Fluke from assigning or sublicensing its rights and obligations under this Agreement.
  • Page 11 You shall discover that the then current supported version of Product fails to conform with any part of the description of the Product provided to you by Fluke then Fluke, on receiving notification of the error, shall use its reasonable endeavours to: 2.2.1...
  • Page 12: Table Of Contents

    User’s Guide – version 3.1.3 Contents INTRODUCTION What is NetFlow? What is NetFlow Tracker? Features and Benefits INSTALLATION Minimum System Requirements Operating System Support Pre-installation Checks Installation on Microsoft Windows Installation on Solaris and Linux Post-installation Tasks USING NETFLOW TRACKER Real-time Data Long-term Data Executive Reports...
  • Page 13 User’s Guide – version 3.1.3 LONG-TERM REPORTS Devices and Interfaces Per-device and Per-interface Long-term Reports Filter Editor EXECUTIVE REPORTS REPORT URL FORMAT General Form Report Format Parameters Time Range Parameters Filter Parameters Security Parameters Management Portal Access Control Parameters PERFORMANCE TUNING Disk Speed Query Size Database Server Settings...
  • Page 14 User’s Guide – version 3.1.3 IP Application Names DiffServ Names Hostname Resolution Settings AS Names Subnet Names Database Settings Backup Archiving Memory Settings Performance Counters APPENDIX 1: DEVICE CONFIGURATION Enabling NetFlow Export/NDE on a Cisco Router or Layer 3 Switch Configuring NetFlow Input Filters for Traffic Class Reporting Enabling Flow Detail Records on a Packeteer Device Enabling NetFlow on an Enterasys Device...
  • Page 15: Introduction

    User’s Guide – version 3.1.3 Introduction This document is the user manual for NetFlow Tracker, a software product designed to collect NetFlow information from Cisco equipment and present it in a meaningful way. This document does not provide any assistance with Cisco equipment itself. Please consult your Cisco documentation for any queries you have relating to the equipment itself.
  • Page 16 User’s Guide – version 3.1.3 Straightforward URL format for linking current, automatically updated charts into • other applications. Optimized database structure ensures fast report generation under heavy load. • NetFlow Tracker...
  • Page 17: Installation

    The version of MySQL used by NetFlow Tracker is significantly different to that • used by Fluke Networks’ products NetFlow Monitor, NetWatch and ResponseWatch. If NetFlow Tracker is installed on a server running one of these products it will not function correctly. Likewise, if one of these products is installed on a server running NetFlow Tracker, both products are likely not to function correctly.
  • Page 18: Installation On Microsoft Windows

    Welcome & Licence Agreement Once the Java Runtime Environment is installed, you can press the “Next >” button to view Fluke Networks’ licence agreement, which you must agree to before pressing “Next >” again. Customer Information You will be asked to provide your name and company name, and whether to install the software just for yourself or for every user that logs in to the system.
  • Page 19: Installation On Solaris And Linux

    Click “Install” to start. Installation should take no more than a few minutes; if it appears to have stopped for a long time you should contact Fluke Networks. When installation is complete you can click “Finish” to close the install program.
  • Page 20 User’s Guide – version 3.1.3 NetFlow Tracker Set up SNMP community strings If any of the devices you intend monitoring do not use a read-only SNMP community of “public” you will need to add their communities to the list in SNMP Settings.
  • Page 21: Using Netflow Tracker

    User’s Guide – version 3.1.3 NetFlow Tracker Using NetFlow Tracker Once you have installed NetFlow Tracker and configured your devices, data will be available within a few minutes. There are many ways to access this data. Real-time Data NetFlow Tracker stores up to fourteen days full NetFlow data with one minute resolution.
  • Page 22 User’s Guide – version 3.1.3 NetFlow Tracker Device traffic meters In addition to the orderable columns there are two graphical meter columns that allow you to instantly see which devices are currently busy. Each chart shows you the recent peak and the current rate: Each chart is scaled relative to the busiest device;...
  • Page 23: Per-As Data

    User’s Guide – version 3.1.3 NetFlow Tracker Per-AS data If your router uses BGP to route traffic it will provide source and destination origin or peer AS numbers in its NetFlow data. NetFlow Tracker creates optimised bi-directional charts for each AS just as it does for each interface. An AS chart is only available for a single device as otherwise there is a high chance that some or all traffic will be accounted for multiple times by multiple routers.
  • Page 24 User’s Guide – version 3.1.3 Zooming in You can zoom in to the chart by clicking the zoom in button on the toolbar: This will zoom in on the center of the chart. If you want to zoom in on a particular selection, see Selecting a time range from automatically refreshing.
  • Page 25: Working With Pie Charts

    User’s Guide – version 3.1.3 NetFlow Tracker Alter the filter applied to a standard chart Most charts allow you to change the applied filter by click the filter editor toolbar button: Creating Filtered Reports for more about the filter editor. View resolved domain names If a chart shows IP addresses several of them may be underlined;...
  • Page 26: Working With Tabular Reports

    User’s Guide – version 3.1.3 NetFlow Tracker View a pie chart as a standard chart You can view a pie chart as a chart over time by clicking the chart toolbar button: Working with Tabular Reports Most charts can be displayed instead as a tabular report. Rather than breaking the selected time range into small chunks and charting each one, a tabular report shows the entire time range in one table.
  • Page 27 User’s Guide – version 3.1.3 NetFlow Tracker You can click one of these radio buttons to select a row to drill down into. Note that only one row can be selected. To examine the data contributing to that rows figures, select the type of sub-report you’d like to open from the drop down list at the bottom of the report and click on “Filter…”: Thus if you are looking at a report of source applications, you can select an application...
  • Page 28: Report Templates

    User’s Guide – version 3.1.3 Report Templates Whenever you create a new tabular report or chart you can choose any of the standard report templates depending on what you want to examine: Address Reports Source Addresses – shows the IP addresses that were the source of most traffic •...
  • Page 29 User’s Guide – version 3.1.3 Source Endpoints – shows the IP addresses and corresponding applications that • were the source of most traffic or packets. The top source endpoints inwards on a link are the remote services using your bandwidth. Destination Endpoints –...
  • Page 30: Creating Filtered Reports

    User’s Guide – version 3.1.3 VPNs – shows the VPNs with most traffic or packets. Interfaces must be • associated with VPNs in Next Hops – shows the next-hop addresses that received most traffic or packets. • Note that only a router can supply a next-hop address. Traffic Identification Reports Identified Applications –...
  • Page 31 User’s Guide – version 3.1.3 NetFlow Tracker Sample Size NetFlow Tracker picks an optimal sample size for a real-time chart based upon the amount of time covered; you can override this by selecting a number of units. For example, you can create a report covering a day with each sample being an hour long. Source Data Long-term data is stored in samples of various sizes that are optimal for different lengths of chart;...
  • Page 32 User’s Guide – version 3.1.3 NetFlow Tracker Out Interface The out interface filter restricts a report to just outbound traffic from a set of interfaces. Used in combination with an in interface filter it will report on traffic that took a particular path through a router. In/Out Interface The in/out interface filter restricts the report to bi-directional traffic for the selected interfaces.
  • Page 33 User’s Guide – version 3.1.3 NetFlow Tracker Recognised Application This filter selects traffic with the given source or destination application. Whether the source or destination application is considered depends on whether it has a name defined in the IP Application Names settings page, or if both or neither have names, whichever has the lower port number.
  • Page 34 User’s Guide – version 3.1.3 NetFlow Tracker Destination Subnet This filter selects traffic with the given destination subnets. Note that a destination subnet filter of 224.0.0.0/4 will select multicast traffic. Source/Destination Subnet This filter selects traffic to or from the given subnets. Source Mask This will select traffic routed using the given source network mask.
  • Page 35: Long-Term Reports

    User’s Guide – version 3.1.3 Long-term Reports Long-term reports allow you to look at data over much longer time ranges than is possible with the standard real-time database. The data for long-term reports is summarized in advance so a long-term report over several days or weeks can often be much faster than an equivalent real-rime one.
  • Page 36 User’s Guide – version 3.1.3 NetFlow Tracker If you select a per-device, per-inbound interface or per-outbound interface report you must also specify what device or interface to report upon. The editors for selecting a device or interface are slightly different to their counterparts in the real-time Filter Editor in that they allow only one item to be selected.
  • Page 37: Executive Reports

    User’s Guide – version 3.1.3 NetFlow Tracker Executive Reports An executive report is a pre-defined template that contains one or more charts or tabular reports. Executive reports can be created to show related information on one page and to allow quick access to commonly-used reports. Executive reports are defined in Report Settings and accessed by clicking on “Executive...
  • Page 38: Report Url Format

    User’s Guide – version 3.1.3 Report URL Format You can easily generate your own URLs or modify automatically created ones for use in network management portals favourites lists. General Form http://<server>:<port>/report.jsp?prm=value&prm=value... server The domain name or IP address of the NetFlow Tracker server port The HTTP port of the NetFlow Tracker server prm, value...
  • Page 39 User’s Guide – version 3.1.3 0023 Next Hops 0024 Source Address Dissemination 0025 Destination Address Popularity 0026 Recognised Applications 0027 Traffic Classes 0028 Identified Applications 0029 Bi-directional Address Pairs 0030 Bi-directional Conversations 0031 Bi-directional AS Pairs 0032 Bi-directional Network Pairs 0033 Total 0034...
  • Page 40 User’s Guide – version 3.1.3 nrecords – specifies the number of rows to show per page of a tabular report. <number> The number of rows per page Show all rows others – specifies that a tabular report shows an “others” row instead of a page navigator.
  • Page 41 User’s Guide – version 3.1.3 sections – specifies the report sections to output. <sections> The sections, formed by summing the values for each section -<sections> The sections that are not displayed features – specifies the available interactive report features. <features> The features, formed by summing the values for each feature 1024 2048...
  • Page 42: Time Range Parameters

    User’s Guide – version 3.1.3 format – specifies the output format of the report or chart. html Fully interactive HTML (default) print Printable/saveable HTML Comma separated values reload – specifies the number of seconds between automatic refreshes of the report. This is best used in conjunction with one of the dynamic time ranges, below.
  • Page 43 User’s Guide – version 3.1.3 Calendar-based (simple) A simple calendar-based time range is a given number of units ending either when the report is generated or at the end of the last full unit before the report is generated. unit – specifies the unit to measure the time range in. hour Hours Days...
  • Page 44 User’s Guide – version 3.1.3 Calendar-based (advanced) An advanced calendar-based time range has an optional start date specified as a given number of units before the time of report generation, defaulting to the day of report generation. The start time is specified in plain text. The optional end date is specified in the same manner as the start date, defaulting to the same day as the start date.
  • Page 45 User’s Guide – version 3.1.3 edate_nunitsago – (optional) specifies the number of units before the time of report generation of the last day of the time range. The last day of the time range will be the first day of the unit following the current unit at the time of report generation The last day of the time range will be the first day of the current unit at the time of report generation (default)
  • Page 46 User’s Guide – version 3.1.3 Specifying a time zone By default the time zone used to interpret calendar-based time ranges and time-of-day masks is the time zone of the NetFlow Tracker server. You can specify a non-default time zone if you wish. Note that if a long-term report has a configured time zone or mask, this parameter will have no effect.
  • Page 47 User’s Guide – version 3.1.3 (GMT+02:00) Bucharest (GMT+02:00) Cairo (GMT+02:00) Harare, Pretoria (GMT+02:00) Helsinki, Kyiv, Riga, Sofia, Tallinn, Vilnius (GMT+02:00) Jerusalem (GMT+03:00) Baghdad (GMT+03:00) Kuwait, Riyadh (GMT+03:00) Moscow, St. Petersburg, Volgograd (GMT+03:00) Nairobi (GMT+03:30) Tehran (GMT+04:00) Abu Dhabi, Muscat (GMT+04:00) Baku, Tbilisi, Yerevan (GMT+04:30) Kabul (GMT+05:00) Ekaterinburg (GMT+05:00) Islamabad, Karachi, Tashkent...
  • Page 48 User’s Guide – version 3.1.3 (GMT+12:00) Fiji, Kamchatka, Marshall Is. (GMT+13:00) Nuku'alofa Specifying the chart sample size When you create a real-time chart the system chooses a sample size that will create as close to 150 samples over the full width of the chart as possible. If you want to you can specify a different sample size to show, for example, a day in hour-long samples or a month in day-long samples.
  • Page 49: Filter Parameters

    User’s Guide – version 3.1.3 sample – specifies the source long-term data to use 10minute Daily data (ten minute samples) will be used 1hour Weekly data (one hour samples) will be used 6hour Monthly data (six hour samples) will be used 12hour Quarterly data (twelve hour samples) will be used 1day...
  • Page 50 User’s Guide – version 3.1.3 invpn – specifies a VPN that the input interface must be part of. <name> The VPN name; see <id> The VPN identifier outvpn – specifies a VPN that the output interface must be part of. Format as for invpn above.
  • Page 51 User’s Guide – version 3.1.3 dstappl – specifies an acceptable destination IP application. Format as for srcappl above. dstappl_exclude=true – specifies that the supplied destination applications are excluded rather than included. appl – specifies an acceptable source or destination IP application. Format as for srcappl above.
  • Page 52 User’s Guide – version 3.1.3 ds – specifies an acceptable differentiated service codepoint. <name> The assigned name of the codepoint <code> The six-digit binary representation of the codepoint <byte> The value of the entire Type-of-Service byte, in the range 0-255 ds_exclude=true –...
  • Page 53: Security Parameters

    User’s Guide – version 3.1.3 dstnet – specifies an acceptable destination subnet. Format as for srcnet above. dstnet_exclude=true – specifies that the supplied destination subnets are excluded rather than included. net – specifies an acceptable source or destination subnet. Format as for srcnet above.
  • Page 54: Management Portal Access Control Parameters

    User’s Guide – version 3.1.3 Management Portal Access Control Parameters NetFlow Tracker allows management portals to set up restricted access to the system for multiple users. So long as it is possible to conceal the initial URL sent to NetFlow Tracker it is possible for the user to fully interact with the resulting report while being prevented from accessing certain data.
  • Page 55 User’s Guide – version 3.1.3 aclid – specifies a permitted long-term report. null No long-term reports are permitted <id> A permitted long-term report; see id in Parameters aclcid – specifies a permitted executive report. null No executive reports are permitted <id>...
  • Page 56 User’s Guide – version 3.1.3 In VPN Out VPN aclfeatures – specifies the permitted interactive report features. <features> The features, formed by summing the values for each feature. 1024 2048 4096 8192 16384 32768 65536 Navigation Menu Select All button, if applicable Zoom In button, if applicable Zoom Out button, if applicable Open as Tabular Report, Chart or Pie buttons as...
  • Page 57: Performance Tuning

    User’s Guide – version 3.1.3 NetFlow Tracker Performance Tuning There are several factors that influence how quickly a given report is generated: Disk Speed The first step in creating a report is reading the raw data from disk; increasing the speed of the disk subsystem will make reporting faster.
  • Page 58: Configuration Guide

    User’s Guide – version 3.1.3 NetFlow Tracker Configuration Guide To open any of the settings pages, click “Settings” on the main page. If you have password protection enabled you may have to login as an administrative user to see the link. Each settings page controls a single aspect of the software; if you make any changes you must click “Ok”...
  • Page 59: Device Settings

    User’s Guide – version 3.1.3 NetFlow Tracker Device Settings Device List This page allows you to check the status of a known device and override the interface descriptions and speeds obtained from it. The name and address of each known device is listed, along with an icon indicating its status;...
  • Page 60 User’s Guide – version 3.1.3 If you are unable to change the configuration of the router or switch, or if an interface is asynchronous, you can override the description or inwards and outwards speed used in reports here. You can also supply interface descriptions and speeds for a non-SNMP compatible device.
  • Page 61: Security Settings

    User’s Guide – version 3.1.3 NetFlow Tracker VPNs NetFlow Tracker can associate an interface on a device with a VPN for reporting and filtering. Any number of interfaces on any number of devices can be associated with a single VPN, and their traffic will be grouped together in the VPNs report and by the VPN filters.
  • Page 62: Management Portal Settings

    User’s Guide – version 3.1.3 NetFlow Tracker Management Portal Settings If you wish to use a management portal to set up restricted access to NetFlow Tracker for multiple users you must first register it with NetFlow Tracker. Please see Management Portal Access Control Parameters under Report URL Format for more...
  • Page 63: Report Settings

    User’s Guide – version 3.1.3 Report Settings This page lets you configure various values affecting the way reports and charts appear in NetFlow Tracker. Rows per tabular report page is the number of rows shown on each page of a •...
  • Page 64 User’s Guide – version 3.1.3 Saved Filters Saved filters can be defined that can be added wherever a filter editor appears in the software. A saved filter allows you to attach a name to, for example, a time-of-day mask or a filter that selects traffic related to a particular multi-port application or group of servers.
  • Page 65 User’s Guide – version 3.1.3 Also note that any filters passed to the executive report are applied to the sub-reports in conjunction with whatever filters they have themselves. Please be careful about using unfiltered sub-reports as they will be accessible from the without a means of supplying a filter, and this could cause problems.
  • Page 66: An Example Executive Report - Top Applications Today And This Week

    User’s Guide – version 3.1.3 NetFlow Tracker An Example Executive Report – Top Applications Today and This Week This report contains two sub reports, one showing top applications for a device over the last 24 hours and the other over 7 days. The reports are shown as pie and time charts, and HTML cells are used to annotate the report.
  • Page 67 User’s Guide – version 3.1.3 NetFlow Tracker The fourth row consists of a single sub-report cell containing the chart legend for the first sub-report. No interactive controls are supported. Simply select “Today” as the report, “Legend” as the only section, and deselect all controls. Don’t forget to make the cell cover two columns.
  • Page 68: Ip Application Names

    User’s Guide – version 3.1.3 NetFlow Tracker IP Application Names NetFlow Tracker receives application information in the form of a protocol number and port number. These correspond directly to specific network applications. Many are predefined (well-known ports) while others (registered ports) are defined by the software manufacturer.
  • Page 69: As Names

    User’s Guide – version 3.1.3 AS Names This page lets you assign names to AS numbers appearing in reports. AS numbers below 34816 are assigned by several agencies; NetFlow Tracker comes with many of these ASs already named. Numbers between 34816 and 64511 are held by the IANA and should not be used.
  • Page 70 User’s Guide – version 3.1.3 Store real-time data for allows you to change the number of days full real-time data • is stored for. You can reduce this to save disk space, or increase it if you are sure you have enough free space. Store 10 minute, 1hour, etc.
  • Page 71: Backup

    User’s Guide – version 3.1.3 NetFlow Tracker Backup NetFlow Tracker can back up its configuration, and optionally its long-term and real- time databases, to a nominated folder on demand or on a schedule. The contents of the folder are erased before the backup, so ensure that you move scheduled backups to long-term storage if required.
  • Page 72: Memory Settings

    User’s Guide – version 3.1.3 NetFlow Tracker Memory Settings NetFlow Tracker uses a small amount of memory during its normal operation. You can control this amount by changing the values here, but it is not likely to be necessary. Note that it is possible to prevent the software from working by setting inappropriate values.
  • Page 73 User’s Guide – version 3.1.3 NetFlow Tracker Unprocessed Flowsets NetFlow version 9 flows are encoded in a flexible manner using templates that are exported by the router every few seconds. For a period after starting NetFlow Tracker or after a router reboot, flows may be received without NetFlow Tracker knowing how to decode them.
  • Page 74: Appendix 1: Device Configuration

    User’s Guide – version 3.1.3 Appendix 1: Device Configuration This is a brief guide to setting up NetFlow on various types of device. Note that if your device isn’t listed here it does not mean it is not supported by NetFlow Tracker; please ask your device vendor for a guide to enabling NetFlow.
  • Page 75 User’s Guide – version 3.1.3 ip flow-cache timeout active 1 This breaks up long-lived flows into one-minute segments. ip flow-cache timeout inactive 15 This ensures that flows that have finished are exported in a timely manner. interface <interface> ip route-cache flow or ip flow ingress or ip route-cache cef bandwidth <kbps>...
  • Page 76 Distributed Forwarding Cards and older than 12.1(13)E03, 12.1(18.1)E, • 12.2(13.6)S, 12.2(15.1)S or 12.2(17a)SX: this configuration will cause serious problems, so please contact Fluke Networks if your device matches this description. No Distributed Forwarding Cards and 12.0(24)S, 12.2(18)S, 12.3(1) or •...
  • Page 77 User’s Guide – version 3.1.3 mls flow ip interface-full mls nde interface mls flow ip full If you have a Supervisor Engine 2 or 720 running IOS version 12.1.13(E) or higher the first two commands are required to put interface and routing information into the NetFlow Exports.
  • Page 78 User’s Guide – version 3.1.3 Configuring NDE on a CatOS Device A layer 3 switch running CatOS appears as two devices; the MSFC can be configured to export NetFlow information on all the packets it routes by following the instructions for configuring an device above.
  • Page 79: Configuring Netflow Input Filters For Traffic Class Reporting

    User’s Guide – version 3.1.3 Configuring NetFlow Input Filters for Traffic Class Reporting IOS versions 12.2(25)S, 12.2(27)SBC and 12.3(4)T and greater support the NetFlow Input Filters feature, which can be used by NetFlow Tracker to report upon the traffic class used to route each flow. flow-sampler-map allflows mode random one-out-of 1 exit...
  • Page 80: Enabling Netflow On An Enterasys Device

    User’s Guide – version 3.1.3 To ensure that NetFlow Tracker receives enough information from the device you must ensure that the “Look Community String” configured in the “SNMP” page is one of those set up in SNMP Settings, and you must set “Packeteer-0 Packets” to “on” in the “system variables”...
  • Page 81: Using Sflowtool To Convert Sflow Records To Netflow

    User’s Guide – version 3.1.3 Using sflowtool to Convert sFlow Records to NetFlow NetFlow Tracker does not directly support devices which export sFlow records; however, the developer of sFlow provides a tool to convert sFlow records to NetFlow records, available at http://www.inmon.com/technology/sflowTools.php. This is a simple command-line utility which can be run as a daemon on Unix or a service on Windows by using one of the many free service installers available.
  • Page 82: Appendix 2: Csv File Format

    User’s Guide – version 3.1.3 NetFlow Tracker Appendix 2: CSV File Format Every standard chart and tabular report can be converted to comma-separated-value format for importing into a database server or spreadsheet. Chart CSV format Each section is separated by a row of “=” signs. The first section is the chart title; the second is the time range and filter.
  • Page 83: Appendix 3: Third Party Software Components

    User’s Guide – version 3.1.3 NetFlow Tracker Appendix 3: Third Party Software Components This product includes software developed by the Apache Software Foundation (http://www.apache.org/). This product includes software developed by Advantys (http://www.advantys.com). Jakarta Log4j NetFlow Tracker includes Jakarta Log4j v1.1.3, available at http://logging.apache.org/log4j/.

Table of Contents