Author: Steve

Stephen joined Plixer in 2011. Steve’s efforts over the years have helped many customer gain better Visibility and Network Analytics. With more than 5 years of successful technology consultation, Steve has become a thought leader, focusing on how Scrutinizer can be part of a system incorporating other solutions such as Gigamon, Statseeker, Uptime, InfoBlox and Splunk. Firm believer that most organizations will have a larger SDN implementation and greater leveraging the Cloud in the next few years. Steve resides in Scarborough, ME with his wife and two sons.

Network Operations

Juniper MX IPFIX Reporting

12.02.16 - Steve

We recently had the opportunity to work with an exciting Juniper IPFIX MX Series export. It provides traffic details that we haven’t seen before from this vendor. The export is available in release 14.1X55 and release 17.1 in Q1 2017, but you also need the MX with subscriber/application awareness (using MS-MPC cards). Read more

General

Juniper MX240 IPFIX Support | Direction Problems

04.02.16 - Steve

The other day I was helping an engineer who was trying to provide some Juniper MX240 IPFIX support when we ran into some “flow direction” problems that lead to reporting issues. After setting up the export and not seeing anything in our NetFlow Collector, I decided to get out the packet analyzer and capture the datagrams. It was time to take a look at the contents within the flows at deeper level. What we learned: Juniper is not exporting flow direction correctly and this is causing problems.

General

Splunk NetFlow Integration

10.13.15 - Steve

We took some time recently to get our Splunk NetFlow integration working. Apparently, there are a few customers who are looking to get from NetFlow to Splunk and from Splunk to NetFlow. This of course applies to IPFIX and sFlow as well.

General

Overview of DNS Protocol : Part 3 of 3

05.16.15 - Steve

Make sure you read Part 1 of Overview of DNS Protocol before reading this one or you can go back to part 2. At this point, I want to introduce why we wanted to write a 3 part DNS process overview series.

Security Operations

Cisco ISE vs Forescout CounterACT

01.04.15 - Steve

Recently, we tested Cisco ISE vs Forescout CounterACT. We have implemented and integrated our Incident Response System with three different authentication systems like this and this post highlights some of the features and facts that we really liked about CounterACT v7.0.0.