Fluke Computer Accessories User Manual
Fluke Computer Accessories User Manual

Fluke Computer Accessories User Manual

Fluke computer accessories user manual
Table of Contents

Advertisement

Quick Links

NetFlow Tracker
User's Guide Version 3.5
May 2007
Copyright 2004 - 2007 Fluke Corporation. All rights reserved.
All product names are trademarks of their respective companies.
w.flukenetworks.com

Advertisement

Table of Contents
loading

Summary of Contents for Fluke Computer Accessories

  • Page 1 NetFlow Tracker User’s Guide Version 3.5 May 2007 Copyright 2004 - 2007 Fluke Corporation. All rights reserved. All product names are trademarks of their respective companies. w.flukenetworks.com...
  • Page 2: Table Of Contents

    User’s Guide – version 3.5 Contents SOFTWARE LICENSE AGREEMENT INTRODUCTION What is NetFlow? What is NetFlow Tracker? Features and Benefits INSTALLATION Minimum System Requirements Operating System Support Pre-installation Checks Installation on Microsoft Windows Installation on Linux Post-installation Tasks USING NETFLOW TRACKER Real-time Data Long-term Data Executive Reports...
  • Page 3 User’s Guide – version 3.5 LONG-TERM REPORTS Devices and Interfaces Per-device and Per-interface Long-term Reports Filter Editor REPORTS REPORT URL FORMAT General Form Report Format Parameters Time Range Parameters Filter Parameters Security Parameters Management Portal Access Control Parameters PERFORMANCE TUNING Disk Speed Query Size Database Server Settings...
  • Page 4 User’s Guide – version 3.5 IP Application Names DiffServ Names Hostname Resolution Settings AS Names Subnet Names Database Settings Backup Archiving Memory Settings Performance Counters About APPENDIX 1: DEVICE CONFIGURATION Enabling NetFlow Export/NDE on a Cisco Router or Layer 3 Switch Configuring NetFlow Input Filters for Traffic Class Reporting Enabling Flow Detail Records on a Packeteer Device Enabling NetFlow on an Enterasys Device...
  • Page 5: Software License Agreement

    Product enabled by that key solely for the purpose of evaluation, and the Product will cease to function seven (7) days from enabling (or after such longer period as may be agreed by Fluke and confirmed by Fluke or your Reseller in writing), at which time the licence grant for that Product also ends.
  • Page 6 (“Warranty Period”). The warranty for any hardware accompanying the Product shall be as stated on the warranty card shipped with the hardware. If, within the Warranty Period, You notify Fluke of any defect or fault in the Product in consequence of which the Product fails to perform substantially in accordance with its...
  • Page 7 Party giving full particulars of the breach and requiring it to be remedied. You shall be obliged to notify Fluke in writing of any change in the control or ownership of the End User and Fluke shall be entitled forthwith to terminate this Agreement by written notice.
  • Page 8 Agreement or any part of your rights or obligations hereunder whether in whole or in part save in accordance with this Agreement and with the prior written consent of Fluke and You shall not allow the Product to become the subject of any charge, lien or encumbrance of whatever nature.
  • Page 9 User’s Guide – version 3.5 NetFlow Tracker 14.4 If any provisions of the Agreement are held to be unenforceable, illegal or void in whole or in part the remaining portions of the Agreement shall remain in full force and effect. 14.5 No party shall be liable to the other for any delay or non-performance of its obligations under this Agreement (save for your obligation to pay the fees in accordance with clause 1) arising from any cause or causes beyond its reasonable control including, without limitation, any...
  • Page 10 Save as provided for elsewhere in this Agreement, this Agreement including the Schedule represents the entire of the understanding of the parties concerning the subject matter hereof, viz, the provision of support and maintenance services by Fluke to You, and overrides and supersedes all prior promises, representations, understandings, arrangements, agreements, letters of intent or heads of agreement concerning the same which are hereby revoked by mutual consent of the parties.
  • Page 11 You shall pay the Support Charges to Fluke annually in advance. The Support Charges shall be paid within 30 days after receipt of Fluke’s invoice thereof. No Support Services will be provided until payment in full has been received by Fluke. In the event of late payment, interest...
  • Page 12 (including legal costs) incurred by or taken against Fluke as a result of the negligence, fault, error, omission, act or breach of You or of your employees, staff, contractors, agents or representatives or for any breach of this Agreement whatsoever by You.
  • Page 13 Agreement or any part of its right or obligations hereunder whether in whole or in part without the prior written consent of Fluke. Nothing in this Agreement shall preclude Fluke from assigning or sublicensing its rights and obligations under this Agreement.
  • Page 14: Support Services

    You shall discover that the then current supported version of Product fails to conform with any part of the description of the Product provided to you by Fluke then Fluke, on receiving notification of the error, shall use its reasonable endeavours to: 2.2.1...
  • Page 15: Introduction

    User’s Guide – version 3.5 Introduction This document is the user manual for NetFlow Tracker, a software product designed to collect NetFlow information from Cisco equipment and present it in a meaningful way. This document does not provide any assistance with Cisco equipment itself. Please consult your Cisco documentation for any queries you have relating to the equipment itself.
  • Page 16 User’s Guide – version 3.5 Every report and chart can be formatted as CSV or XML for further processing or • as simplified HTML or PDF for printing or emailing. Straightforward URL format for linking current, automatically updated charts into •...
  • Page 17: Installation

    The version of MySQL used by NetFlow Tracker is significantly different to that • used by Fluke Networks’ products NetFlow Monitor, NetWatch and ResponseWatch. If NetFlow Tracker is installed on a server running one of these products it will not function correctly. Likewise, if one of these products is installed on a server running NetFlow Tracker, both products are likely not to function correctly.
  • Page 18: Installation On Microsoft Windows

    Welcome & Licence Agreement Once the Java Runtime Environment is installed, you can press the “Next >” button to view Fluke Networks’ licence agreement, which you must agree to before pressing “Next >” again. Customer Information You will be asked to provide your name and company name, and whether to install the software just for yourself or for every user that logs in to the system.
  • Page 19: Installation On Linux

    Click “Install” to start. Installation should take no more than a few minutes; if it appears to have stopped for a long time you should contact Fluke Networks. When installation is complete you can click “Finish” to close the install program.
  • Page 20 User’s Guide – version 3.5 NetFlow Tracker Set up SNMP community strings If any of the devices you intend monitoring do not use a read-only SNMP community of “public” you will need to add their communities to the list in SNMP Settings.
  • Page 21: Using Netflow Tracker

    User’s Guide – version 3.5 NetFlow Tracker Using NetFlow Tracker Once you have installed NetFlow Tracker and configured your devices, data will be available within a few minutes. There are many ways to access this data. Real-time Data NetFlow Tracker stores up to fourteen days full NetFlow data with one minute resolution.
  • Page 22 User’s Guide – version 3.5 NetFlow Tracker Device traffic meters In addition to the orderable columns there are two graphical meter columns that allow you to instantly see which devices are currently busy. Each chart shows you the recent peak and the current rate: Each chart is scaled relative to the busiest device;...
  • Page 23: Per-As Data

    User’s Guide – version 3.5 NetFlow Tracker Per-AS data If your router uses BGP to route traffic it will provide source and destination origin or peer AS numbers in its NetFlow data. NetFlow Tracker creates optimised bi-directional charts for each AS just as it does for each interface. An AS chart is only available for a single device as otherwise there is a high chance that some or all traffic will be accounted for multiple times by multiple routers.
  • Page 24 User’s Guide – version 3.5 Zooming in You can zoom in to the chart by clicking the zoom in button on the toolbar: This will zoom in on the centre of the chart. If you want to zoom in on a particular selection, see Selecting a time range from automatically refreshing.
  • Page 25 User’s Guide – version 3.5 NetFlow Tracker Alter the filter applied to a standard chart Most charts allow you to change the applied filter by click the filter editor toolbar button: Creating Filtered Reports for more about the filter editor. View resolved domain names If a chart shows IP addresses several of them may be underlined;...
  • Page 26: Working With Pie Charts

    User’s Guide – version 3.5 Working with Pie Charts Most charts can be displayed instead as a pie chart. Rather than breaking the selected time range into small chunks and charting each one, a pie chart shows each of the top element’s proportion of the total octets or packets during the entire time range.
  • Page 27 User’s Guide – version 3.5 NetFlow Tracker Sort a tabular report A report can be sorted on any of the columns describing the reported elements, or can be sorted by traffic or packet rate. Simply click the column heading – if you click a column heading twice it will be sorted in the opposite order.
  • Page 28: Report Templates

    User’s Guide – version 3.5 Report Templates Whenever you create a new tabular report or chart you can choose any of the standard report templates depending on what you want to examine: Address Reports Source Addresses – shows the IP addresses that were the source of most traffic •...
  • Page 29 User’s Guide – version 3.5 Bi-directional Conversations – adds extra columns showing the traffic and packets • sent from destination to source and the bi-directional totals for each conversation. Source Endpoints – shows the IP addresses and corresponding applications that •...
  • Page 30: Creating Filtered Reports

    User’s Guide – version 3.5 Networks – shows the IP subnets that were the source or destination of the most • traffic or packets. Network Pairs – shows the pairs of connected IP subnets that exchanged most • traffic or packets. Bi-directional Network Pairs –...
  • Page 31 User’s Guide – version 3.5 NetFlow Tracker Some filters allow a range of items to be added; in this case enter the start and end of the range in the boxes provided. To select a single item, leave the right-hand box empty, If you are logged in as an administrator or not logged in you can save a filter by clicking “Save…”...
  • Page 32 User’s Guide – version 3.5 NetFlow Tracker Time zone You can change the time zone used to interpret the start and end times and time masks from the default of the time zone used by the NetFlow Tracker server. Source device You must select which router or switch you want to consider.
  • Page 33 User’s Guide – version 3.5 NetFlow Tracker Protocol You can restrict the set of IP protocols considered. For example, you may want to consider only UDP or ICMP traffic while investigating a denial-of-service attack. Source port The source port filter restricts the source application port number; it should be used in conjunction with the protocol filter.
  • Page 34 User’s Guide – version 3.5 NetFlow Tracker DiffServ This will select only traffic bearing one of the selected differentiated service code points. Since DiffServ and ToS use the same field in the IP header you should not use both filters at the same time. You can assign a name to a code point using the DiffServ Names settings page.
  • Page 35: Long-Term Reports

    User’s Guide – version 3.5 Long-term Reports Long-term reports allow you to look at data over much longer time ranges than is possible with the standard real-time database. The data for long-term reports is summarized in advance so a long-term report over several days or weeks can often be much faster than an equivalent real-rime one.
  • Page 36 User’s Guide – version 3.5 NetFlow Tracker If you select a per-device, per-inbound interface or per-outbound interface report you must also specify what device or interface to report upon. The editors for selecting a device or interface are slightly different to their counterparts in the real-time Filter Editor in that they allow only one item to be selected.
  • Page 37: Reports

    User’s Guide – version 3.5 NetFlow Tracker Reports The “Reports” menu on the NetFlow Tracker homepage contains links to user-defined executive and scheduled reports. An executive report is a pre-defined template that contains one or more charts or tabular reports. Executive reports can be created to show related information on one page and to allow quick access to commonly-used reports.
  • Page 38: Report Url Format

    User’s Guide – version 3.5 Report URL Format You can easily generate your own URLs or modify automatically created ones for use in network management portals favourites lists. General Form http://<server>:<port>/report.jsp?prm=value&prm=value... server The domain name or IP address of the NetFlow Tracker server The HTTP port of the NetFlow Tracker server port prm, value...
  • Page 39 User’s Guide – version 3.5 0023 Next Hops 0024 Source Address Dissemination 0025 Destination Address Popularity 0026 Recognised Applications 0027 Traffic Classes 0028 Identified Applications 0029 Bi-directional Address Pairs 0030 Bi-directional Conversations 0031 Bi-directional AS Pairs 0032 Bi-directional Network Pairs 0033 Total 0034...
  • Page 40 User’s Guide – version 3.5 output – specifies if a tabular report or chart will be generated. table A tabular report will be generated (default) chart A chart over time will be generated A pie chart will be generated nrecords – specifies the number of rows to show per page of a tabular report. <number>...
  • Page 41 User’s Guide – version 3.5 sections – specifies the report sections to output. <sections> The sections, formed by summing the values for each section -<sections> The sections that are not displayed features – specifies the available interactive report features. <features> The features, formed by summing the values for each feature 1024 2048...
  • Page 42: Time Range Parameters

    User’s Guide – version 3.5 format – specifies the output format of the report or chart. html Fully interactive HTML (default) print Printable/saveable HTML Comma separated values reload – specifies the number of seconds between automatic refreshes of the report. This is best used in conjunction with one of the dynamic time ranges, below;...
  • Page 43 User’s Guide – version 3.5 etime – specifies the end of the required time range. <time> <dd>/<MM>/<yyyy>%20<HH>:<mm> Fixed length If you would like to create a URL that will always show a current time range, you can specify a certain number of milliseconds ending at the time the report is generated. length –...
  • Page 44 User’s Guide – version 3.5 <number> The time range will extend to the end of this number of full units before the time of report generation nunits – specifies the number of units required. Note that this may include a partial unit.
  • Page 45 User’s Guide – version 3.5 edate_nunitsago – (optional) specifies the number of units before the time of report generation of the last day of the time range. The last day of the time range will be the first day of the unit following the current unit at the time of report generation The last day of the time range will be the first day of the current unit at the time of report generation (default)
  • Page 46 User’s Guide – version 3.5 Specifying a time zone By default the time zone used to interpret calendar-based time ranges and time-of-day masks is the time zone of the NetFlow Tracker server. You can specify a non-default time zone if you wish. Note that if a long-term report has a configured time zone or mask, this parameter will have no effect.
  • Page 47 User’s Guide – version 3.5 (GMT+02:00) Bucharest (GMT+02:00) Cairo (GMT+02:00) Harare, Pretoria (GMT+02:00) Helsinki, Kyiv, Riga, Sofia, Tallinn, Vilnius (GMT+02:00) Jerusalem (GMT+03:00) Baghdad (GMT+03:00) Kuwait, Riyadh (GMT+03:00) Moscow, St. Petersburg, Volgograd (GMT+03:00) Nairobi (GMT+03:30) Tehran (GMT+04:00) Abu Dhabi, Muscat (GMT+04:00) Baku, Tbilisi, Yerevan (GMT+04:30) Kabul (GMT+05:00) Ekaterinburg (GMT+05:00) Islamabad, Karachi, Tashkent...
  • Page 48 User’s Guide – version 3.5 (GMT+12:00) Fiji, Kamchatka, Marshall Is. (GMT+13:00) Nuku'alofa Specifying the chart sample size When you create a real-time chart the system chooses a sample size that will create as close to 150 samples over the full width of the chart as possible. If you want to you can specify a different sample size to show, for example, a day in hour-long samples or a month in day-long samples.
  • Page 49: Filter Parameters

    User’s Guide – version 3.5 sample – specifies the source long-term data to use 10minute Daily data (ten minute samples) will be used 1hour Weekly data (one hour samples) will be used 6hour Monthly data (six hour samples) will be used 12hour Quarterly data (twelve hour samples) will be used 1day...
  • Page 50 User’s Guide – version 3.5 invpn – specifies a VPN that the input interface must be part of. <name> The VPN name; see <id> The VPN identifier outvpn – specifies a VPN that the output interface must be part of. Format as for invpn above.
  • Page 51 User’s Guide – version 3.5 dstport – specifies an acceptable destination application port number. Format as for srcport above. dstport_exclude=true – specifies that the supplied destination application port numbers are excluded rather than included. srcappl – specifies an acceptable source IP application. <port>/<name>...
  • Page 52 User’s Guide – version 3.5 applid_exclude=true – specifies that the supplied identified applications are excluded rather than included. tos – specifies an acceptable Type-of-Service value. <prec> The precedence, in the range 0-7 <tos> A string of letters indicating which ToS bits must be set or unset, each letter being one of D, T, R or M for low delay, high throughput, high reliability and minimise monetary cost respectively, or d, t, r or m for normal delay, normal...
  • Page 53 User’s Guide – version 3.5 dstas_exclude=true – specifies that the supplied destination autonomous system numbers are excluded rather than included. as – specifies an acceptable source or destination autonomous system number. Format as for srcas above. as_exclude=true – specifies that the supplied source or destination autonomous system numbers are excluded rather than included.
  • Page 54: Security Parameters

    User’s Guide – version 3.5 nexthop – specifies a next-hop address. <addr> The address in dotted-decimal format <addr1>-<addr2> A range of addresses, with <addr1> being the start of the range and <addr2> the end nexthop_exclude=true – specifies that the supplied next-hop addresses are excluded rather than included.
  • Page 55: Management Portal Access Control Parameters

    User’s Guide – version 3.5 Management Portal Access Control Parameters The following parameters are used by a management portal that provides users with access to NetFlow Tracker reports as described in portalsecret – specifies the secret value assigned to the management portal in Management Portal Settings.
  • Page 56 User’s Guide – version 3.5 Out Interface In/Out Interface Protocol Source Port Dest Port Src/Dest Port Source Application Dest Application Src/Dest Application DiffServ Source AS Dest AS Src/Dest AS Source Subnet Dest Subnet Src/Dest Subnet Source Mask Dest Mask Src/Dest Mask Recognised Application Traffic Class Identified Application...
  • Page 57 User’s Guide – version 3.5 1024 2048 4096 8192 16384 32768 65536 Filter Editor button, if applicable Refresh and Resolve All buttons, if applicable Print and CSV buttons, if applicable Open in New Window button Drilldown controls Direct drilldown links (found in navigation reports) Page navigator Sortable column headers Chart scrollbar...
  • Page 58: Performance Tuning

    User’s Guide – version 3.5 NetFlow Tracker Performance Tuning There are several factors that influence how quickly a given report is generated: Disk Speed The first step in creating a report is reading the raw data from disk; increasing the speed of the disk subsystem will make reporting faster.
  • Page 59: Configuration Guide

    User’s Guide – version 3.5 NetFlow Tracker Configuration Guide To open any of the settings pages, click “Settings” on the main page. If you have password protection enabled you may have to login as an administrative user to see the link. Each settings page controls a single aspect of the software; if you make any changes you must click “Ok”...
  • Page 60: Device Settings

    User’s Guide – version 3.5 NetFlow Tracker Device Settings Device List This page allows you to check the status of a known device and override the interface descriptions and speeds obtained from it. The name and address of each known device is listed, along with an icon indicating its status;...
  • Page 61 User’s Guide – version 3.5 A device may be configurable to send the BGP next-hop address in its NetFlow exports; if this is the case you will have the option to store this value in place of the IP next-hop for the device.
  • Page 62: Security Settings

    User’s Guide – version 3.5 NetFlow Tracker If you wish to prevent interfaces that never report any NetFlow data from appearing in interface status report Filter Editor check the box corresponding to the interface in the “inactive” column. If the configuration of the device has changed there may be some unused interfaces listed separately;...
  • Page 63: Management Portal Settings

    User’s Guide – version 3.5 You can use your own html page if you wish by putting it in the “customweb” folder under the NetFlow Tracker install folder; it is then available from the NetFlow Tracker server as, for example, http://server/customweb/file.html, so the homepage would be simply customweb/file.html.
  • Page 64: Using Apache As A Portal Server

    User’s Guide – version 3.5 NetFlow Tracker Using Apache as a Portal Server The Apache web server supports several directives in its configuration file (httpd.conf) that allow it to be used as a programmable proxy server: RewriteEngine On This enables the URL rewriting module. RewriteRule ^/tracker1/report1$ http://1.2.3.4/report.jsp?portalsecret=s3cr3t&acldevice=4.3.2.1&templ id=0000 [P,L]...
  • Page 65: Report Settings

    User’s Guide – version 3.5 Report Settings This page lets you configure various values affecting the way reports and charts appear in NetFlow Tracker. General Settings Show hostnames in reports controls whether reports and charts are opened with • all resolvable hostnames resolved and shown by default. Show chart legends in descending order controls whether the rows of a chart •...
  • Page 66 User’s Guide – version 3.5 Saved Filters Saved filters can be defined that can be added wherever a filter editor appears in the software. A saved filter allows you to attach a name to, for example, a time-of-day mask or a filter that selects traffic related to a particular multi-port application or group of servers.
  • Page 67 User’s Guide – version 3.5 You can choose to have the report generated as PDF or as HTML in the same format as the printable version of a report. HTML can be generated as a single file (MHTML) or a zip file containing the HTML, stylesheets and images. You can also choose CSV or XML format.
  • Page 68 User’s Guide – version 3.5 NetFlow Tracker Executive Reports An executive report is a pre-configured template that contains one or more reports or charts and user-defined HTML content. They can be used to provide easy access to often-used reports or to group related reports together on one page. To create an executive report, enter a name and click “New…”.
  • Page 69 User’s Guide – version 3.5 A HTML cell has a CSS style that is used to control its appearance. Three standard styles are offered – “Report Title” produces a cell that looks exactly like a report title, “Report Description” one with the blue background of a report’s time range and filter description and “Content Cell”...
  • Page 70: An Example Executive Report - Top Applications Today And This Week

    User’s Guide – version 3.5 NetFlow Tracker An Example Executive Report – Top Applications Today and This Week This report contains two sub reports, one showing top applications for a device over the last 24 hours and the other over 7 days. The reports are shown as pie and time charts, and HTML cells are used to annotate the report.
  • Page 71 User’s Guide – version 3.5 NetFlow Tracker The fourth row consists of a single sub-report cell containing the chart legend for the first sub-report. No interactive controls are supported. Simply select “Today” as the report, “Legend” as the only section, and deselect all controls. Don’t forget to make the cell cover two columns.
  • Page 72: Ip Application Names

    User’s Guide – version 3.5 NetFlow Tracker IP Application Names NetFlow Tracker receives application information in the form of a protocol number and port number. These correspond directly to specific network applications. Many are predefined (well-known ports) while others (registered ports) are defined by the software manufacturer.
  • Page 73: As Names

    User’s Guide – version 3.5 AS Names This page lets you assign names to AS numbers appearing in reports. AS numbers below 34816 are assigned by several agencies; NetFlow Tracker comes with many of these ASes already named. Numbers between 34816 and 64511 are held by the IANA and should not be used.
  • Page 74: Backup

    User’s Guide – version 3.5 Store real-time data for allows you to change the number of days full real-time data • is stored for. You can reduce this to save disk space, or increase it if you are sure you have enough free space. Store 10 minute, 1hour, etc.
  • Page 75: Archiving

    User’s Guide – version 3.5 NetFlow Tracker Archiving NetFlow Tracker can be configured to archive real-time data older than the age configured in Database Settings to a nominated location rather than delete it. Archiving is enabled for a device in Device Settings;...
  • Page 76 User’s Guide – version 3.5 NetFlow Tracker NetFlow Data Received This counter shows the number of exports and the amount of NetFlow data received by the software from each device. Note that this is not the amount of traffic described by the exports but the LAN traffic generated by the exports themselves.
  • Page 77: About

    User’s Guide – version 3.5 NetFlow Tracker No In Interface If flows arrive with no in interface it may indicate a configuration problem on a Catalyst switch. Please contact technical support. About The about page shows a summary of information about what versions of NetFlow Tracker, Java, MySQL and you server’s operating system are installed.
  • Page 78: Appendix 1: Device Configuration

    User’s Guide – version 3.5 Appendix 1: Device Configuration This is a brief guide to setting up NetFlow on various types of device. Note that if your device isn’t listed here it does not mean it is not supported by NetFlow Tracker; please ask your device vendor for a guide to enabling NetFlow.
  • Page 79 User’s Guide – version 3.5 ip flow-cache timeout active 1 This breaks up long-lived flows into one-minute segments. ip flow-cache timeout inactive 15 This ensures that flows that have finished are exported in a timely manner. interface <interface> ip route-cache flow or ip flow ingress or ip route-cache cef bandwidth <kbps>...
  • Page 80 Distributed Forwarding Cards and older than 12.1(13)E03, 12.1(18.1)E, • 12.2(13.6)S, 12.2(15.1)S or 12.2(17a)SX: this configuration will cause serious problems, so please contact Fluke Networks if your device matches this description. No Distributed Forwarding Cards and 12.0(24)S, 12.2(18)S, 12.3(1) or •...
  • Page 81 User’s Guide – version 3.5 mls flow ip interface-full mls nde interface mls flow ip full If you have a Supervisor Engine 2 or 720 running IOS version 12.1.13(E) or higher the first two commands are required to put interface and routing information into the NetFlow Exports.
  • Page 82 User’s Guide – version 3.5 Configuring NDE on a CatOS Device A layer 3 switch running CatOS appears as two devices; the MSFC can be configured to export NetFlow information on all the packets it routes by following the instructions for configuring an device above.
  • Page 83: Configuring Netflow Input Filters For Traffic Class Reporting

    User’s Guide – version 3.5 Configuring NetFlow Input Filters for Traffic Class Reporting IOS versions 12.2(25)S, 12.2(27)SBC and 12.3(4)T and greater support the NetFlow Input Filters feature, which can be used by NetFlow Tracker to report upon the traffic class used to route each flow. flow-sampler-map allflows mode random one-out-of 1 exit...
  • Page 84: Enabling Netflow On An Enterasys Device

    User’s Guide – version 3.5 To ensure that NetFlow Tracker receives enough information from the device you must ensure that the “Look Community String” configured in the “SNMP” page is one of those set up in SNMP Settings, and you must set “Packeteer-0 Packets” to “on” in the “system variables”...
  • Page 85: Appendix 2: Csv File Format

    User’s Guide – version 3.5 NetFlow Tracker Appendix 2: CSV File Format Every standard chart and tabular report can be converted to comma-separated-value format for importing into a database server or spreadsheet. Chart CSV format Each section is separated by a row of “=” signs. The first section is the chart title; the second is the time range and filter.
  • Page 86: Appendix 3: Xml Format

    User’s Guide – version 3.5 NetFlow Tracker Appendix 3: XML Format Every standard chart and tabular report can be converted to XML for use in external software. The XML schemas are provided in the xml subfolder underneath the folder where NetFlow Tracker is installed. The root of each XML document contains the report title;...
  • Page 87: Appendix 4: Third Party Software Components

    User’s Guide – version 3.5 NetFlow Tracker Appendix 4: Third Party Software Components This product includes software developed by the Apache Software Foundation (http://www.apache.org/). This product includes software developed by Advantys (http://www.advantys.com). Apache Commons Collections NetFlow Tracker includes Apache Commons Collections 3.2, available at http://commons.apache.org/collections/.
  • Page 88 User’s Guide – version 3.5 NetFlow Tracker jspSmartUpload NetFlow Tracker includes jspSmartUpload 2.1 which is no longer available. This is distributed under the Advantys Freeware license contract, a copy of which is available http://web.archive.org/web/20031209160524/http://www.jspsmart.com/libloca l/docs/legal.htm. Quartz NetFlow Tracker includes Quartz 1.6.0, available at http://www.opensymphony.com/quartz/.

Table of Contents