Using NetFlow to see user defined Application Groups in Scrutinizer

Posted in NetFlow, NetFlow Analyzer, Scrutinizer on January 4th, 2010 by scottr
using-netflow-to-see-user-defined-application-groups-in-scrutinizer

Since the release of the latest version of our NetFlow and sFlow analysis tool, I have been blogging about some of the new features that are available.

One of the new report features available gives you the ability to filter on conversations and show user defined applications that were involved in those conversations.

Read more »

Tags: , , , , , , , , ,

Using Cisco NetFlow to find Source and Destination ports

Posted in NetFlow, NetFlow Analyzer, Scrutinizer on October 22nd, 2009 by scottr
using-cisco-netflow-to-find-source-and-destination-ports

Let’s say that you are looking for information regarding network traffic taking place between company workstations and an application server; we’ll call it acmeapplication.com. You know that acmeapplication.com is using random port numbers to send downloads back to the workstations making the requests.

When using NetFlow analysis software to monitor network traffic, you may see lots of HTTP port 80 conversations with the assistance of the Conversations filter, but nothing showing the random ports used by acmeapplication.com, as demonstrated below.

Read more »

Tags: , , , , , ,

Plixer and Cisco IP SLA: HTTP – Part 4 of 4

Posted in Denika, General, IP SLA, Network Problem Resolution, Scrutinizer, WebNM on January 19th, 2009 by Raul J Duran

Hello Everyone,

If you would like to see other blogs on how to setup IP SLAs check out these links.
IP SLA – Jitter – 1 of 4
IP SLA – ICMP Echo – 2 of 4
IP SLA – TCP Connect – 3 of 4

We’ve arrived at the fourth and final part of this series.  In this blog, we’re talking about the Cisco HTTP IP SLA operation and some ways that it can be useful.

The HTTP IP SLA operation is a very useful tool in the verification of performance of Web servers, Proxy servers, or any other HTTP server.

There are 3 measurements that will provide a total round trip time measurement for the HTTP operation:

• DNS lookup:  How much time it takes to complete a domain name lookup.
• TCP Connect:  How much time it takes to complete a TCP connection to the HTTP server.
• HTTP transaction time:  How long it took to send a request and get a response from the HTTP server.

A good use for this monitor is to confirm that performance stays within the acceptable limits of an SLA and also to gauge your user’s perceptions as to how fast the connection is.   
The HTTP IP SLA operation can also be used to monitor proxy servers.  One is example is with a VRRP deployment where there is an HTTP proxy server involved.  If the HTTP IP SLA operation reports a failed connection to the proxy server, a failover process can be initiated automatically so that a secondary router continues to forward all HTTP requests to the proxy server. 

The DNS lookup time is an important factor to a good overall user experience. 

“How MySpace is hurting your network”, a Networkworld.com article,  explains how social networking sites like MySpace and Facebook  may exponentially increase the number of DNS lookups, impacting the performance of your network.  You may want to check out your netflow analyzer to see whether too many users are checking out these sites.

Cisco IP SLAs can make a huge difference in how well network administrators can increase efficiency of their network.  Pair Cisco IP SLAs with Netflow, good SNMP and Netflow Analyzing applications and you’ll have a winning combination of tools to make sure your network is well tuned.

Thanks for reading this series, good luck and have fun setting up the IP SLAs!

Sincerely,
Raul Duran

Tags: , , , , , , ,