Using Flexible NetFlow (FnF) to configure user defined templates, you have the ability to export layer 2 information such as MAC address, fragment identification and VLAN ID’s.

Using the right NetFlow and sFlow Analysis tool, gives you the ability to fully report on those user defined fields set up in the Flexible NetFlow templates.

Included in the reporting engine in Scrutinizer v8 is an advanced filter that lets you filter any report on any field found in the exported NetFlow template.

Scrutinizer is currently the only product on the market that lets you do this.

Using the Advanced Filter, lets see how we can use those layer 2 user defined fields to filter a Conversation report on a MAC address and then exclude an interface from the report.

From the Current Report window, we select the Advanced Filter from the Add New Filter box.

Advanced NetFlow Report Filter

Then we select the destinationMacAddress field from the template field list and apply a LIKE filter for the MAC address we want to filter the report on. Then add a second advanced filter where we filter the report on the dotq1VlanId field to exclude Vlan2 from the report.

Layer2 NetFlow report

Here is a link to the blog: “How to Configure Flexible NetFlow“. You will find it very helpful if you have called us looking for help in enabling Flexible NetFlow.

Look how using IPFIX exported from nProbe, in combination with the new advanced reporting filter options in Scrutinizer, we can now catch network traffic destined for hand held devices.

Have you heard about Cisco’s Medianet?

Using Medianet and Flexible NetFlow, IPSLA reporting is now available from a NetFlow export. A flow through the network can now be verified end to end and hop by hop for quality of service. This includes checks for jitter, packet loss, round trip time and more. This is much better than IP SLA trends which are often based on synthetic transactions and not the actual connection the user experienced during the call. Our NetFlow Analyzer delivers detailed reports on all traffic related to Voice and Video, making troubleshooting issues related to choppy communications is much easier.

And again, Scrutinizer is the only product on the market that lets you report from this new technology.

There are a number of new report filters available in Scrutinizer v8. If you would like me to show you how to use them to assist with your network analysis needs, give me a call – (207)324-8805

Scott Robertson author pic


Scott provides Pre Sales Technical Support to the Sales team at Plixer. Scott comes from a technical support background, having years of experience doing everything from customer account management to system programming. Some of his interests include coaching youth sports programs here in Sanford, playing drums and guitar in local jam bands, and playing in neighborhood lawn dart tournaments.


Big Data

Sankey Flow Graph

One of the greatest benefits of NetFlow collection for traffic analysis, is we’re provided with the ability to visualize the…

Leave a Reply