Available Languages: English
This screen displays the current status of all the interfaces via the NetFlows that are being received. They are ordered by default by percent utilization (based on layer 3 information) of the interface. This screens gives a birds eye view of all the flows as well as the uptime of the router they are being received from.
Located in the upper left and right hand corners, in the left tree
menu, it signifies that a NetFlow is being received from this router. Clicking on this icon in the upper
right hand corner will bring up the Manage Devices interface.
Located in the upper left hand corner, this signifies
that a NetFlow is no longer being received from this router.
Click this image to search for a specific
host or application.
Click this image to pop up a window that prepares
the page for printing.
Click this icon to view the Google Map layout
of the NetFlow/sFlow devices.
This graphic should only appear when there
are updates available for Scrutinizer. When this icon is clicked, a pop up window will give further
instructions. NOTE: This icon may not go away if the company's network (e.g. proxy server)
is preventing Scrutinizer from connecting to the plixer.com web site to check for updates. Click
on the icon to see if updates are available.
Mouse over this icon and Scrutinizer will pop up an
8 hour trend of overall in / out traffic on this interface. Click on this icon to bring up a daily,
weekly, monthly and yearly trend of this interface. NOTE: Out traffic may not be accurately
represented if netflow is not enabled on all interfaces of the device.
Each interface of every device will either be green, yellow or purple. Green reflects actively receiving
NetFlow for this interface. Yellow indicates either that the interface was recently discovered and
is being "learned" for the next several minutes or that no NetFlow is being received for the interface
and if this continues for 24 hours the interface will be dropped from the status page. Purple
indicates that no SFlow has been received on the interface for the past 5 minutes and if this
continues for 24 hours the interface will be dropped from the status page. 
This icon represents the version of NetFlow or
Sflow being received from this device. The mouse over ALT tag provides greater details.
This icon is clicked to display the stored
SNMP information on the router. It can also be used to modify the community string or to manually
set the interface speed.
This icon represents a Custom Reports which is
specific to criteria defined in the report. The ALT tag will give the reporting details.
Click on this icon to edit the Custom Report. This
icon will not show up if the user does not have permissions.
This icon represents a group with a status of OK.
This icon represents a group with a status
representing something within the group should be addressed (e.g. device not sending a flow).
Click on the Conversations link to display the top conversations
on this NetFlow device.
Click the Users link to see the top hosts communicating on
this NetFlow device
Click on the Applications link to see the top applications
being utilized on this NetFlow device.
Click on the Application Group link to display
the top applications made up of two or more protocols on this NetFlow device.
Click on the Quality of Service link to display the top ToS and DiffServ
priority tags.
Click on the Autonomous System link to display the top AS traffic.
Click on the Interfaces link to display all the interfaces on
this device which have flow enabled. 
Click on the Denika link to display or discover the SNMP
statistics for this device.
Click on this icon/link to launch the
favorite local telnet utility to the NetFlow transmitting device.
Set this option to configure how many
minutes the InBound and OutBound utilization bars should be based on.
THE ROUTER OR SWITCH MUST BE CONFIGURED TO SEND NETFLOW OR SFLOW. Click Here to learn how to enable NetFlow on the routers.
Click on the Port Speed to manually configure the speed of the interface or to over ride what was discovered by SNMP.
These first two icons display the status of the Scrutinizer Collector and Filer services. For example, the Collector has the following meanings:
The service “Startup Type” is set
to Automatic but, it is currently not running. A red LED could also mean the service is running
manually from the CLI.
Blinking yellow is displayed
for a status which is unique to each service. Click on these icons to learn more.
The service “Startup Type” is set
to Manual. A gray LED could also mean the service is running manually from the CLI. 
Solid green is displayed
when the Scrutinizer NetFlow Collector service is set to Automatic and it is currently
running as a service. Debug mode is not operational in this state.WARNING: Scrutinizer should be installed with administrator privileges else, the LED color may stay a constant RED regardless of service status. All services should be running with "local administrator" privileges.
The last two LEDs have to do with:
Solid green is displayed
when everything is fine. Blinking yellow is displayed
when something is wrong. Click on the LED to bring up greater details.Scrutinizer's debug console (i.e. CollectD.exe) provides real time insight into the
conversations coming into the NetFlow collector. It is also used to confirm real-time that
NetFlow is being received by Scrutinizer. To run it, bring up windows services and stop the
Scrutinizer NetFlow Collector service. Then, bring up a command prompt.
The service Status should appear blank as shown below: (hit F5 to Refresh!)
NOTE: Scrutinizer should be installed with administrator privileges.
After the services has been stopped, bring up a command prompt and go to the ~/SCRUTINIZER/html directory and type in "collectd".
The above can be very helpful when trying to confirm that Scrutinizer is receiving Sflow
or NetFlow packets.
NOTE if collectd does not scroll by as shown above displaying the NetFlow coming in, NetFlow
is most likely not configured properly on the router. Click on the Manage Devices icon
Located in the upper right hand corner as it will bring
up the Manage Devices interface where the ports to listen for flows can be modified.
Click Here
to learn how to properly configure NetFlow.
In situations where it never changes, confirm that the flow source is set to “ACTIVE” in the Manage Flows settings page. If it’s inactive, this message won’t go away.
REMEMBER because the collector is running in debug mode, the service LED
in the status page will be
blinking red until the service is running and set to automatically start on reboot.
CAUTION after shutting down the collectd window, make sure the service is restarted !!!
The flows in this screen can be filtered by entering text into the Router, Interface and Port Speed fields. The Transmit and Receive consumption bars will change color depending on the percent of utilization. Place the mouse over the bar to display an ALT tag with the actual consumption amount.
In Bound Traffic: In Bound traffic is collect by turning NetFlow
on for a single interface.
Out Bound Traffic: Out Bound traffic is collected by turning NetFlow
on for every other interface. In other words, Out Bound traffic is most accurately represented when
NetFlow is active on every port of the switch or router.
Green: 1%-40%
Yellow: 41%-60%
Orange: 61%-75%
Red: 76%-100%Click on the bars above to bring up the most recent 5 minute interval of data on the selected interface. By default, Top Hosts are displayed.
Important Note: Scrutinizer was engineered to be a passive collection tool with no SNMP polling requirements. Because of this, utilization is based on layer 3 and above traffic.
Putting the mouse over a router name or the corresponding interface will cause the entry to highlight in light green. Clicking on the Interface will bring up the top Hosts for the interface.
Send Page via Email: Place multiple emails in the space separated by a "," comma. Notes can be entered and sent along with the email.
To change the Scrutinizer image from the left frame: Make a backup of this file: ./html/icons/scrutinizer.png. Overwrite the current scrutinizer.png with the new one.
Would you like to see a feature added to Scrutinizer? Click Here and tell us about your feature request.
Next Topic: Top Users
Available Languages: English