Page 2 - NetFlow Tracker; Software License Agreement; GRANT OF LICENCE AND PAYMENT OF FEES; EVALUATION, UPDATES, UPGRADES AND SUPPORT AND MAINTENANCE
User’s Guide – version 3.1.3 NetFlow Tracker 2 Software License Agreement This is a legal agreement between you (“You”/ “the End User””), and Fluke Corporation, a Washington corporation, its subsidiaries and affiliates, including Fluke Networks (“Fluke”), with offices at 6920 Seaway Boulevard, Evere...
Page 3 - RESTRICTIONS
User’s Guide – version 3.1.3 NetFlow Tracker 3 If You have purchased the maintenance and support services from Fluke then subject to payment of the support fees, Fluke shall provide such services in respect of the Product in accordance with the provisions of the Support and Maintenance Agreement con...
Page 4 - CUSTOMER REMEDIES; NO LIABILITY FOR CONSEQUENTIAL DAMAGES
User’s Guide – version 3.1.3 NetFlow Tracker 4 6. CUSTOMER REMEDIES You must call your Fluke representative for an authorization to return any item during the 90 day warranty period referred to in clause 5 above, and You will be supplied with a return authorisation number and an address for returnin...
Page 5 - CONFIDENTIAL INFORMATION AND SECURITY
User’s Guide – version 3.1.3 NetFlow Tracker 5 11. CONFIDENTIAL INFORMATION AND SECURITY During and after this Agreement, the Parties will keep in confidence and use only for the purposes of this Agreement all Confidential Information. Confidential Information means information belonging or relating...
Page 7 - Appendix 1 to End User Licence
User’s Guide – version 3.1.3 NetFlow Tracker 7 Appendix 1 to End User Licence Terms and Conditions for Fluke Support and Maintenance Service 1. Definitions 1.1 In this Agreement and in the Schedules hereto, save where the context so admits or requires, the following definitions shall have the follow...
Page 8 - Services; Charges; Supplier’s Undertakings
User’s Guide – version 3.1.3 NetFlow Tracker 8 1.7 The contents of the Schedule form an integral part of this Agreement and shall have as full effect as if it were incorporated in the body of this Agreement and the expressions “this Agreement” and “the Agreement” used in the Schedule shall mean this...
Page 9 - Limitation of Liability and indemnity; Property
User’s Guide – version 3.1.3 NetFlow Tracker 9 5.4 Without prejudice to the generality of clause 5.3 and for the avoidance of doubt, to the fullest extent permitted by law all terms implied by Sections 13, 14 and 15 of the Sale of Goods Act, 1893 are hereby excluded and all terms implied by the Sale...
Page 10 - Confidential Information and Security; 0 Miscellaneous
User’s Guide – version 3.1.3 NetFlow Tracker 10 9. Confidential Information and Security 9.1 During and after this Agreement, the Parties will keep in confidence and use only for the purposes of this Agreement all Confidential Information. Confidential Information means information belonging or rela...
Page 11 - Schedule; Support Hours
User’s Guide – version 3.1.3 NetFlow Tracker 11 Schedule Support Services 1. Support Hours The Support Hours during which Fluke shall supply the Support Services shall be between 9.30am and 5pm on Working Days. 2. Support Services Fluke shall provide You during the Support Hours with: 2.1. technical...
Page 12 - Contents
User’s Guide – version 3.1.3 NetFlow Tracker 12 Contents INTRODUCTION 15 What is NetFlow? 15 What is NetFlow Tracker? 15 Features and Benefits 15 INSTALLATION 17 Minimum System Requirements 17 Operating System Support 17 Pre-installation Checks 17 Installation on Microsoft Windows 18 Installation on...
Page 15 - Introduction; What is NetFlow Tracker?
User’s Guide – version 3.1.3 NetFlow Tracker 15 Introduction This document is the user manual for NetFlow Tracker, a software product designed to collect NetFlow information from Cisco equipment and present it in a meaningful way. This document does not provide any assistance with Cisco equipment it...
Page 17 - Installation; Minimum System Requirements; Microsoft Windows; Pre-installation Checks; Before installing, there are a few things you need to check:
User’s Guide – version 3.1.3 NetFlow Tracker 17 Installation Minimum System Requirements The type of system required to run NetFlow Tracker depends on the number of devices sending NetFlow information to it and the amount and nature of traffic handled by those devices. The following requirements are...
Page 18 - installation if you wish.; Installation on Microsoft Windows; accept the default choices and continue.
User’s Guide – version 3.1.3 NetFlow Tracker 18 • NetFlow Tracker contains an embedded web server. Web servers normally run on port 80, but this may be in use by another web server on your system. You can choose a different port during installation or disable other web servers prior to installation ...
Page 19 - “NetFlow Tracker” in the Programs section of your start menu.; Installation on Solaris and Linux; 0 if you didn’t choose a port.
User’s Guide – version 3.1.3 NetFlow Tracker 19 Custom Setup You will only see this dialog if you chose custom setup above. You should see options for NetFlow Tracker and MySQL, unless an unsupported version of MySQL was detected. To change the install folder for either NetFlow Tracker or MySQL, cli...
Page 20 - Set up SNMP community strings
User’s Guide – version 3.1.3 NetFlow Tracker 20 Set up SNMP community strings If any of the devices you intend monitoring do not use a read-only SNMP community of “public” you will need to add their communities to the list in SNMP Settings . Add listener ports If you intend monitoring more than one ...
Page 21 - Using NetFlow Tracker; Executive Reports
User’s Guide – version 3.1.3 NetFlow Tracker 21 Using NetFlow Tracker Once you have installed NetFlow Tracker and configured your devices, data will be available within a few minutes. There are many ways to access this data. Real-time Data NetFlow Tracker stores up to fourteen days full NetFlow data...
Page 22 - Device traffic meters
User’s Guide – version 3.1.3 NetFlow Tracker 22 Device traffic meters In addition to the orderable columns there are two graphical meter columns that allow you to instantly see which devices are currently busy. Each chart shows you the recent peak and the current rate: Each chart is scaled relative ...
Page 23 - Filter Editor; Working with Charts; Report Settings
User’s Guide – version 3.1.3 NetFlow Tracker 23 Per-AS data If your router uses BGP to route traffic it will provide source and destination origin or peer AS numbers in its NetFlow data. NetFlow Tracker creates optimised bi-directional charts for each AS just as it does for each interface. An AS cha...
Page 25 - Alter the filter applied to a standard chart; Working with Pie Charts; charts
User’s Guide – version 3.1.3 NetFlow Tracker 25 Alter the filter applied to a standard chart Most charts allow you to change the applied filter by click the filter editor toolbar button: See Creating Filtered Reports for more about the filter editor. View resolved domain names If a chart shows IP ad...
Page 26 - Working with Tabular Reports
User’s Guide – version 3.1.3 NetFlow Tracker 26 View a pie chart as a standard chart You can view a pie chart as a chart over time by clicking the chart toolbar button: Working with Tabular Reports Most charts can be displayed instead as a tabular report. Rather than breaking the selected time range...
Page 27 - the report and click on “Filter...”:
User’s Guide – version 3.1.3 NetFlow Tracker 27 You can click one of these radio buttons to select a row to drill down into. Note that only one row can be selected. To examine the data contributing to that rows figures, select the type of sub-report you’d like to open from the drop down list at the ...
Page 28 - Report Templates; Address Reports
User’s Guide – version 3.1.3 NetFlow Tracker 28 Report Templates Whenever you create a new tabular report or chart you can choose any of the standard report templates depending on what you want to examine: Address Reports • Source Addresses – shows the IP addresses that were the source of most traff...
Page 29 - QoS Reports
User’s Guide – version 3.1.3 NetFlow Tracker 29 • Source Endpoints – shows the IP addresses and corresponding applications that were the source of most traffic or packets. The top source endpoints inwards on a link are the remote services using your bandwidth. • Destination Endpoints – shows the IP ...
Page 30 - Traffic Identification Reports; Creating Filtered Reports; Report Template
User’s Guide – version 3.1.3 NetFlow Tracker 30 • VPNs – shows the VPNs with most traffic or packets. Interfaces must be associated with VPNs in Device Settings for this report to function. • Next Hops – shows the next-hop addresses that received most traffic or packets. Note that only a router can ...
Page 31 - Pick the date and time of the last data to consider.
User’s Guide – version 3.1.3 NetFlow Tracker 31 Sample Size NetFlow Tracker picks an optimal sample size for a real-time chart based upon the amount of time covered; you can override this by selecting a number of units. For example, you can create a report covering a day with each sample being an ho...
Page 32 - took a particular path through a router.
User’s Guide – version 3.1.3 NetFlow Tracker 32 Out Interface The out interface filter restricts a report to just outbound traffic from a set of interfaces. Used in combination with an in interface filter it will report on traffic that took a particular path through a router. In/Out Interface The in...
Page 34 - This filter selects traffic to or from the given subnets.
User’s Guide – version 3.1.3 NetFlow Tracker 34 Destination Subnet This filter selects traffic with the given destination subnets. Note that a destination subnet filter of 224.0.0.0/4 will select multicast traffic. Source/Destination Subnet This filter selects traffic to or from the given subnets. S...
Page 35 - Devices and Interfaces
User’s Guide – version 3.1.3 NetFlow Tracker 35 Long-term Reports Long-term reports allow you to look at data over much longer time ranges than is possible with the standard real-time database. The data for long-term reports is summarized in advance so a long-term report over several days or weeks c...
Page 36 - Filter
User’s Guide – version 3.1.3 NetFlow Tracker 36 If you select a per-device, per-inbound interface or per-outbound interface report you must also specify what device or interface to report upon. The editors for selecting a device or interface are slightly different to their counterparts in the real-t...
Page 37 - page and to allow quick access to commonly-used reports.
User’s Guide – version 3.1.3 NetFlow Tracker 37 Executive Reports An executive report is a pre-defined template that contains one or more charts or tabular reports. Executive reports can be created to show related information on one page and to allow quick access to commonly-used reports. Executive ...
Page 38 - Report URL Format; General Form; server; Report Format Parameters; templid; report template; cid
User’s Guide – version 3.1.3 NetFlow Tracker 38 Report URL Format You can easily generate your own URLs or modify automatically created ones for use in network management portals favourites lists. General Form http://<server>:<port>/report.jsp?prm=value&prm=value... server The domain...
Page 41 - sections
User’s Guide – version 3.1.3 NetFlow Tracker 41 sections – specifies the report sections to output. The sections, formed by summing the values for each section 1 Title 2 Time range & filter description 4 Main report or chart body 8 Chart title, if applicable 16 Chart legend, if applicable <se...
Page 42 - Time Range Parameters; Start and end time
User’s Guide – version 3.1.3 NetFlow Tracker 42 format – specifies the output format of the report or chart. html Fully interactive HTML (default) print Printable/saveable HTML csv Comma separated values reload – specifies the number of seconds between automatic refreshes of the report. This is best...
Page 45 - Applying a time-of-day mask to the time range
User’s Guide – version 3.1.3 NetFlow Tracker 45 edate_nunitsago – (optional) specifies the number of units before the time of report generation of the last day of the time range. 0 The last day of the time range will be the first day of the unit following the current unit at the time of report gener...
Page 46 - Specifying a time zone; timezone; – specifies the time zone of the report.
User’s Guide – version 3.1.3 NetFlow Tracker 46 Specifying a time zone By default the time zone used to interpret calendar-based time ranges and time-of-day masks is the time zone of the NetFlow Tracker server. You can specify a non-default time zone if you wish. Note that if a long-term report has ...
Page 48 - Specifying the chart sample size
User’s Guide – version 3.1.3 NetFlow Tracker 48 285 (GMT+12:00) Fiji, Kamchatka, Marshall Is. 300 (GMT+13:00) Nuku'alofa Specifying the chart sample size When you create a real-time chart the system chooses a sample size that will create as close to 150 samples over the full width of the chart as po...
Page 49 - Filter Parameters; saved filter
User’s Guide – version 3.1.3 NetFlow Tracker 49 sample – specifies the source long-term data to use 10minute Daily data (ten minute samples) will be used 1hour Weekly data (one hour samples) will be used 6hour Monthly data (six hour samples) will be used 12hour Quarterly data (twelve hour samples) w...
Page 50 - Device Settings
User’s Guide – version 3.1.3 NetFlow Tracker 50 invpn – specifies a VPN that the input interface must be part of. <name> The VPN name; see Device Settings for more information <id> The VPN identifier outvpn – specifies a VPN that the output interface must be part of. Format as for invpn ...
Page 53 - Security Parameters
User’s Guide – version 3.1.3 NetFlow Tracker 53 dstnet – specifies an acceptable destination subnet. Format as for srcnet above. dstnet_exclude=true – specifies that the supplied destination subnets are excluded rather than included. net – specifies an acceptable source or destination subnet. Format...
Page 54 - Management Portal Access Control Parameters; Management Portal
User’s Guide – version 3.1.3 NetFlow Tracker 54 Management Portal Access Control Parameters NetFlow Tracker allows management portals to set up restricted access to the system for multiple users. So long as it is possible to conceal the initial URL sent to NetFlow Tracker it is possible for the user...
Page 55 - Report Format
User’s Guide – version 3.1.3 NetFlow Tracker 55 aclid – specifies a permitted long-term report. null No long-term reports are permitted <id> A permitted long-term report; see id in Report Format Parameters above for permitted values aclcid – specifies a permitted executive report. null No exec...
Page 56 - aclfeatures
User’s Guide – version 3.1.3 NetFlow Tracker 56 29 VPN 30 In VPN 31 Out VPN aclfeatures – specifies the permitted interactive report features. The features, formed by summing the values for each feature. 1 Navigation Menu 2 Select All button, if applicable 4 Zoom In button, if applicable 8 Zoom Out ...
Page 57 - Performance Tuning; Disk Speed; you have a fast disk subsystem or lots of RAM, or both. See
User’s Guide – version 3.1.3 NetFlow Tracker 57 Performance Tuning There are several factors that influence how quickly a given report is generated: Disk Speed The first step in creating a report is reading the raw data from disk; increasing the speed of the disk subsystem will make reporting faster...
Page 58 - Configuration Guide; cause changes to be lost.; Licensing; “Ok” to use the new licence.; Listener Ports; missed flows; SNMP Settings; unlikely you will need to alter these.
User’s Guide – version 3.1.3 NetFlow Tracker 58 Configuration Guide To open any of the settings pages, click “Settings” on the main page. If you have password protection enabled you may have to login as an administrative user to see the link. Each settings page controls a single aspect of the softwa...
Page 59 - Device List
User’s Guide – version 3.1.3 NetFlow Tracker 59 Device Settings Device List This page allows you to check the status of a known device and override the interface descriptions and speeds obtained from it. The name and address of each known device is listed, along with an icon indicating its status; a...
Page 60 - Archiving
User’s Guide – version 3.1.3 NetFlow Tracker 60 If you are unable to change the configuration of the router or switch, or if an interface is asynchronous, you can override the description or inwards and outwards speed used in reports here. You can also supply interface descriptions and speeds for a ...
Page 61 - VPNs; Security Settings; password and whether or not the account is an administrator.
User’s Guide – version 3.1.3 NetFlow Tracker 61 VPNs NetFlow Tracker can associate an interface on a device with a VPN for reporting and filtering. Any number of interfaces on any number of devices can be associated with a single VPN, and their traffic will be grouped together in the VPNs report and...
Page 62 - Management Portal Settings
User’s Guide – version 3.1.3 NetFlow Tracker 62 Management Portal Settings If you wish to use a management portal to set up restricted access to NetFlow Tracker for multiple users you must first register it with NetFlow Tracker. Please see Management Portal Access Control Parameters under Report URL...
Page 63 - device, interface and AS status reports and charts.
User’s Guide – version 3.1.3 NetFlow Tracker 63 Report Settings This page lets you configure various values affecting the way reports and charts appear in NetFlow Tracker. • Rows per tabular report page is the number of rows shown on each page of a tabular report. Note that the device and interface ...
Page 64 - Saved Filters
User’s Guide – version 3.1.3 NetFlow Tracker 64 Saved Filters Saved filters can be defined that can be added wherever a filter editor appears in the software. A saved filter allows you to attach a name to, for example, a time-of-day mask or a filter that selects traffic related to a particular multi...
Page 66 - Content; nelements
User’s Guide – version 3.1.3 NetFlow Tracker 66 An Example Executive Report – Top Applications Today and This Week This report contains two sub reports, one showing top applications for a device over the last 24 hours and the other over 7 days. The reports are shown as pie and time charts, and HTML ...
Page 67 - cell cover two columns.
User’s Guide – version 3.1.3 NetFlow Tracker 67 The fourth row consists of a single sub-report cell containing the chart legend for the first sub-report. No interactive controls are supported. Simply select “Today” as the report, “Legend” as the only section, and deselect all controls. Don’t forget ...
Page 68 - IP Application Names; DiffServ Names
User’s Guide – version 3.1.3 NetFlow Tracker 68 IP Application Names NetFlow Tracker receives application information in the form of a protocol number and port number. These correspond directly to specific network applications. Many are predefined (well-known ports) while others (registered ports) a...
Page 69 - AS Names; amounts of data may take considerably longer to run.
User’s Guide – version 3.1.3 NetFlow Tracker 69 AS Names This page lets you assign names to AS numbers appearing in reports. AS numbers below 34816 are assigned by several agencies; NetFlow Tracker comes with many of these ASs already named. Numbers between 34816 and 64511 are held by the IANA and s...
Page 70 - time range is chosen.
User’s Guide – version 3.1.3 NetFlow Tracker 70 • Store real-time data for allows you to change the number of days full real-time data is stored for. You can reduce this to save disk space, or increase it if you are sure you have enough free space. • Store 10 minute, 1hour, etc. long-term data for a...
Page 71 - Backup; Database Settings
User’s Guide – version 3.1.3 NetFlow Tracker 71 Backup NetFlow Tracker can back up its configuration, and optionally its long-term and real- time databases, to a nominated folder on demand or on a schedule. The contents of the folder are erased before the backup, so ensure that you move scheduled ba...
Page 72 - Memory Settings; this should not take longer than thirty minutes.
User’s Guide – version 3.1.3 NetFlow Tracker 72 Memory Settings NetFlow Tracker uses a small amount of memory during its normal operation. You can control this amount by changing the values here, but it is not likely to be necessary. Note that it is possible to prevent the software from working by s...
Page 74 - Appendix 1: Device Configuration; Enabling NetFlow Export/NDE on a Cisco Router or Layer 3; CatOS; ip cef; ip flow-export source loopback 0
User’s Guide – version 3.1.3 NetFlow Tracker 74 Appendix 1: Device Configuration This is a brief guide to setting up NetFlow on various types of device. Note that if your device isn’t listed here it does not mean it is not supported by NetFlow Tracker; please ask your device vendor for a guide to en...
Page 75 - ip flow ingress; input filters
User’s Guide – version 3.1.3 NetFlow Tracker 75 ip flow-cache timeout active 1 This breaks up long-lived flows into one-minute segments. ip flow-cache timeout inactive 15 This ensures that flows that have finished are exported in a timely manner. interface <interface> ip route-cache flow or ip...
Page 76 - Enabling NetFlow Export on a 4000 Series Switch; ip; Enabling NDE on a Native IOS Device
User’s Guide – version 3.1.3 NetFlow Tracker 76 Enabling NetFlow Export on a 4000 Series Switch The 4000 and 4500 series switches require a Supervisor IV with a NetFlow Services daughter card (WS-F4531), or a Supervisor V, and IOS version 12.1(19)EW or above to support NetFlow. First configure the d...
Page 77 - mls flow ip interface-full; or; mls flow ip full; earlier IOS version on the Supervisor Engine 2 or 720.
User’s Guide – version 3.1.3 NetFlow Tracker 77 mls flow ip interface-full mls nde interface or mls flow ip full If you have a Supervisor Engine 2 or 720 running IOS version 12.1.13(E) or higher the first two commands are required to put interface and routing information into the NetFlow Exports. Th...
Page 78 - Configuring NDE on a CatOS Device
User’s Guide – version 3.1.3 NetFlow Tracker 78 Configuring NDE on a CatOS Device A layer 3 switch running CatOS appears as two devices; the MSFC can be configured to export NetFlow information on all the packets it routes by following the instructions for configuring an IOS device above. In privile...
Page 79 - Configuring NetFlow Input Filters for Traffic Class Reporting; Create a flow sampler that exports every flow record.; Enabling Flow Detail Records on a Packeteer Device; Tracker. For more information visit
User’s Guide – version 3.1.3 NetFlow Tracker 79 Configuring NetFlow Input Filters for Traffic Class Reporting IOS versions 12.2(25)S, 12.2(27)SBC and 12.3(4)T and greater support the NetFlow Input Filters feature, which can be used by NetFlow Tracker to report upon the traffic class used to route ea...
Page 80 - Enabling NetFlow on an Enterasys Device; set netflow cache enable; set netflow export-interval 1
User’s Guide – version 3.1.3 NetFlow Tracker 80 To ensure that NetFlow Tracker receives enough information from the device you must ensure that the “Look Community String” configured in the “SNMP” page is one of those set up in SNMP Settings , and you must set “Packeteer-0 Packets” to “on” in the “s...
Page 81 - Using sflowtool to Convert sFlow Records to NetFlow; command line options are:
User’s Guide – version 3.1.3 NetFlow Tracker 81 Using sflowtool to Convert sFlow Records to NetFlow NetFlow Tracker does not directly support devices which export sFlow records; however, the developer of sFlow provides a tool to convert sFlow records to NetFlow records, available at http://www.inmon...
Page 82 - Appendix 2: CSV File Format; Chart CSV format; Tabular report CSV format; second is the time range and filter.
User’s Guide – version 3.1.3 NetFlow Tracker 82 Appendix 2: CSV File Format Every standard chart and tabular report can be converted to comma-separated-value format for importing into a database server or spreadsheet. Chart CSV format Each section is separated by a row of “=” signs. The first sectio...
Page 83 - Appendix 3: Third Party Software Components; Jakarta Log4j; Apache Xerces Java
User’s Guide – version 3.1.3 NetFlow Tracker 83 Appendix 3: Third Party Software Components This product includes software developed by the Apache Software Foundation ( http://www.apache.org/ ). This product includes software developed by Advantys ( http://www.advantys.com ). Jakarta Log4j NetFlow T...
