NetFlow reporting is about more than reporting on top x (e.g. Hosts as shown below). Scrutinizer has the most canned reports over every other Netflow Analyzer on the market. In fact, we have so many that we had to add logic to version 8 so that certain reports (e.g. NBAR Reports) don’t show up unless the NetFlow / IPFIX collector is receiving the necessary fields in the NetFlow templates.

NetFlow Top Hosts Report

We have been developing our Netflow solution for over 5 years and realized long ago that NetFlow reporting and filtering is essential to a proper in depth NetFlow traffic analysis solution.  If you are looking at a NetFlow data and want to run a report on the same filter, check out some of these reports, many of which are unique to Scrutinizer.  First, lets look at bits per second:

NetFlow throughput

Packets per seconds will likely follow the same patter as the above.  At least, usually.

NetFlow Volume Report

Flow volume however, may or may not follow the same pattern as above.

NetFlow VolumeFlows Report

A host scanning the network would cause an increase in flows but, not necessarily an increase in bits or a dramatic increase in packets.

We can also trend:

  • The volume of hosts on the network at any given time.
  • The volume of address pairs.
  • Domains, VLANs, MAC Addresses, VRF Information, etc.

The above is why we are the leader in NetFlow Reporting and lets not forget IPFIX reporting.  Maybe I’ll post a blog on why NetFlow filtering is so important.

Leader In NetFlow Award

 

Mike Patterson author pic

Michael

Michael is one of the Co-founders and the former product manager for Scrutinizer. He enjoys many outdoor winter sports and often takes videos when he is snowmobiling, ice fishing or sledding with his kids. Cold weather and lots of snow make the best winters as far as he is concerned. Prior to starting Somix and Plixer, Mike worked in technical support at Cabletron Systems, acquired his Novell CNE and then moved to the training department for a few years. While in training he finished his Masters in Computer Information Systems from Southern New Hampshire University and then left technical training to pursue a new skill set in Professional Services. In 1998 he left the 'Tron' to start Somix which later became Plixer.

Related

Big Data

Sankey Flow Graph

One of the greatest benefits of NetFlow collection for traffic analysis, is we’re provided with the ability to visualize the…