To conclude our 7 part NetFlow v9 overview blog series, I will highlight our Advanced NetFlow Traffic Analyzer, showing off the innovative features we bring to Network Traffic Management and Traffic Analysis in these areas:

• Dashboard views
• Flow Reporting
• Network Security

Read more »

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

In Part 5 of the NetFlow v9 overview series, I will be talking about NetFlow v9 Options Templates, following up on Scott’s installment, part 4, which addressed what a NetFlow Data Flowset is.

What is an Options template?

It is a special type of template record used to communicate the format of data related to the NetFlow process.

Combine the Options template with an Options data record to provide information about the NetFlow process itself.  For example, the options template can contain applications tables with application tags, names and descriptions; or interface index tables to provide interface descriptions via NetFlow.

Read more »

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

In Part 3 of the NetFlow Overview series, I will be discussing the NetFlow Template Flowset.  In Part 1 I covered NetFlow basics, and then Scott addressed NetFlow Packet headers in Part 2 of this series.

The following definitions are taken from Cisco’s NetFlow Version 9 Flow-Record Format whitepaper.

Read more »

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

Welcome to the first installment of our NetFlow v9 Overview, beginning (of course!) with NetFlow basics.

What is NetFlow?

A network flow is defined as a unidirectional sequence of packets between given source and destination endpoints.  Traditional NetFlow uses a 7-tuple of source and destination IP address, transport layer port numbers, IP Protocol, Type of Service (ToS), and the input interface port to uniquely identify flows. Flexible NetFlow (FNF) is a ground-up rewrite of NetFlow which allows the user to customize the NetFlow tuple to include (or exclude) a nearly infinite amount of different fields.

Read more »

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

This is a follow up to Michael Patterson’s blog last month regarding Cisco ASA v8.4(5) supports bidirectional NetFlow exports.

Our IPFIX and NetFlow Analyzer is the only NetFlow solution that supports the new bidirectional flows exported by the Cisco ASA.

This Cisco ASA update makes network traffic monitoring more accurate because the prior NetFlow export added the bytes between two hosts into one Octet Total Counter.

Read more »

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

What is the preferred Cisco NetFlow Port Number to listen on?  Well, it depends.  The NetFlow RFC 3954 does not specify a specific NetFlow listening port, however, in my experience 2055 and 9995 or 9996 are the most popular.  Fortunately, our NetFlow solution, by default, will listen for any NetFlow/sFlow traffic sent to it on UDP ports 2055, 2056, 4432, 4739, 9995, 9996, and 6343.

Read more »

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

IPFIX is taking the world by storm!  Taking it beyond the standard network traffic from routers and switches, you can now get traditional message formats such as syslogs, Microsoft event logs, SNMP traps and more exported as IPFIX!!! And with our IPFIX collector, reporting on this unified message format is similar to monitoring network traffic.

Do you want quick and easy access to Syslog reporting?  What better solution than your NetFlow and IPFIX reporting solution?  With IPFIXify, you can export syslogs as IPFIX records.  Then using Scrutinizer Flow Analyzer as your flow reporting solution, you can then store, report on, correlate and analyze all of those logs.  Check out this list of reports available for Syslog reporting!

Read more »

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

Palo Alto Networks NetFlow support is now available and with the latest version of our NetFlow monitoring solution you can get NAT and also application reporting for this firewall.

Today I’ll be providing step by step instructions on how to configure NetFlow for this device, and also show an example of the extended NetFlow reporting available.

Read more »

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

Are you looking for detailed insight into your SonicWALL VPNs?  With IPFIX reporting from Scrutinizer Flow Analyzer, you can get some really cool SonicWALL VPN Utilization reports.

The VPN reporting available allows you to see both the VPN tunnel bandwidth utilization and also report on the network traffic within the VPN tunnels.  This takes your network monitoring capabilities to exciting new levels.

Read more »

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

Top 3 reasons for setting up Virtual NetFlow?  What is that all about?

It is about the top 3 virtual server solutions that provide NetFlow support: Read more »

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!