Quantcast
Channel: Support Portal
Viewing all 2315 articles
Browse latest View live
↧

Re : Netflow Alerts Profiles

July 29, 2015, 9:16 am
$
0
0
Hi Karthik

I have this explame

If I set 90%, 3 time, 10 minutes it will send and email alert if the trafic exceds at 9:00, 9:01 and 9:02 and the next check It will do it at 9:12

If I set 90%, 3 time, 10 minutes it will send and email if the trafic exceds at 9:00, 9:04 and 9:07 and the next check It will do it at 9:17

The second escenario is possible? or it just counts if the exceds are continous? if one is less than 90% it will start again the counter?

Thank you


↧
Search

Re : Netflow Alerts Profiles

July 29, 2015, 9:32 am
$
0
0
Hi ,

Thank you for writing to us. With respect to you example :
If you create an Utilization threshold 90%, 3 time, 10 minutes, if the utilization exceds at 9:00, 9:01 and 9:02 you will get an email alert at 09:02 and the there will be no check from 09:02 till 09:10.

The next threshold check will start from 09:10 to 09:20.

In NetFlow Analyzer we generate alert based on the Raw Data collected in the application. Please select the Retain Raw Data to 2 hours under Admin -> Raw Data Settings and check on the issue.

Thanks & Regards,

Aravind Lenin
Technical Support Engg- Netflow Analyzer
↧
↧

Re : Is there a way to view raw FNF data received by the Netflow Analyzer?

July 29, 2015, 1:25 pm
$
0
0
Thanks Aravind. Here is the related config on the router:

flow record type performance-monitor Nbar2Rec
 match ipv4 tos
 match ipv4 protocol
 match ipv4 source address
 match ipv4 destination address
 match transport source-port
 match transport destination-port
 match interface input
 match interface output
 match flow direction
 match application name
 collect datalink dot1q vlan input
 collect datalink dot1q vlan output
 collect routing destination as
 collect routing next-hop address ipv4
 collect ipv4 dscp
 collect ipv4 id
 collect ipv4 source prefix
 collect ipv4 source mask
 collect ipv4 destination mask
 collect transport tcp source-port
 collect transport tcp destination-port
 collect transport tcp flags
 collect transport udp source-port
 collect transport udp destination-port
 collect counter bytes
 collect counter packets
 collect timestamp sys-uptime first
 collect timestamp sys-uptime last
 collect application version
 collect application vendor
!
!
flow record type mace MaceRec
 collect ipv4 dscp
 collect interface input
 collect interface output
 collect application name
 collect counter client bytes
 collect counter server bytes
 collect counter client packets
 collect counter server packets
 collect art all
!
!
flow exporter LaptopExp
 destination 10.24.253.202
 source GigabitEthernet0/0
 output-features
 transport udp 9996
 template data timeout 60
 option interface-table
 option application-table
 option application-attributes
 option metadata-version-table
!
!
!
flow monitor type mace MaceMon
 record MaceRec
 exporter LaptopExp
 cache timeout update 5
 cache entries 65000
!
!
flow monitor type performance-monitor Nbar2Mon
 record Nbar2Rec
 exporter LaptopExp
!
class-map match-any Mace_Art
 match any
!
policy-map type performance-monitor Nbar2Policy
 class class-default
   flow monitor Nbar2Mon
policy-map type mace mace_global
 class Mace_Art
  flow monitor MaceMon
!
!
interface GigabitEthernet0/0
 ip address 172.25.121.15 255.255.255.0
 ip nbar protocol-discovery
 duplex auto
 speed auto
 service-policy type performance-monitor input Nbar2Policy
 service-policy type performance-monitor output Nbar2Policy
 mace enable
!

↧

Re : Is there a way to view raw FNF data received by the Netflow Analyzer?

July 29, 2015, 4:21 pm
$
0
0
Hi ,

Thank you for writing to us. Please send us the screenshot of the issue that you are facing with the unclassified application named that you are able to see the Application tab, we will check and get back to you.

Regarding the reporting on the Http url report, you have to configure the device to export the Http url statistics. Please configuration another mace record and monitor as mentioned below and check on the issue:

flow record type mace HTTP_REC
collect application http uri statistics
collect application http host
collect interface input
collect interface output

flow monitor type mace HTTP_MON
exporter LaptopExp
record HTTP_REC
cache timeout update 1

policy-map type mace mace_global
class http-traffic
  flow monitor HTTP_MON

Once configured, all the mace enable command to the interface and check if you get the Http Url statistics.

Thanks & Regards,

Aravind Lenin
Technical Support Engg- Netflow Analyzer
 
↧

Re : Is there a way to view raw FNF data received by the Netflow Analyzer?

July 30, 2015, 11:09 am
$
0
0
Thanks Aravind. When I try to config as you suggested, I got an error:

CR3900-1(config-pmap-c)#flow monitor HTTP_MON
MACE: Unable to create the layout for client instance MACE-EXP-3 - Field unsupported
Warning: Exporter LaptopExp could not be activated because of the following unsupported fields:
    application http uri statistics
    application http host

% Setting exporter LaptopExp with flow record HTTP_REC failed
MACE: MACE action addition failed

Is this because I have an old version of IOS?
CR3900-1#sh version
Cisco IOS Software, C3900 Software (C3900-UNIVERSALK9-M), Experimental Version 15.3(20120808:103544) [surf-veyron_eft-nightly 112]
Copyright (c) 1986-2012 by Cisco Systems, Inc.
Compiled Wed 08-Aug-12 05:50 by surf

ROM: System Bootstrap, Version 15.0(1r)M1, RELEASE SOFTWARE (fc1)

CR3900-1 uptime is 27 weeks, 5 days, 12 hours, 42 minutes
System returned to ROM by power-on
System image file is "flash0:c3900-universalk9-mz-new.SSA"
Last reload type: Normal Reload
Last reload reason: power-on

I'll upgrade the IOS then try again. Thanks for your help.

↧
↧

Re : Is there a way to view raw FNF data received by the Netflow Analyzer?

July 30, 2015, 12:42 pm
$
0
0
Hi ,

Thank you for the update. You can also enable HTTP url statistics with the performance monitor and check on the issue. Please try to edit the performance record with below additional fields and the replace the record back and check on the issue:

flow record type performance-monitor Nbar2Rec
 match ipv4 tos
 match ipv4 protocol
 match ipv4 source address
 match ipv4 destination address
 match transport source-port
 match transport destination-port
 match interface input
 match application name
 match application name account-on-resolution
 collect interface output
 collect application http url
 collect application http host
 collect datalink dot1q vlan input
 collect datalink dot1q vlan output
 collect routing destination as
 collect routing next-hop address ipv4
 collect ipv4 id
 collect ipv4 source prefix
 collect ipv4 source mask
 collect ipv4 destination mask
 collect counter bytes
 collect counter packets
 collect timestamp sys-uptime first
 collect timestamp sys-uptime last

Thanks & Regards,

Aravind Lenin
Technical Support Engg- Netflow Analyzer
 
↧

Flow Rate for system spesification

July 30, 2015, 9:03 pm
$
0
0
Hi, a have a question about determining system spesification. how can i determine the system requirement if i don't know the number of flow rates on my network? 
↧

Install of Netflow on windows 2012 server

August 3, 2015, 10:12 pm
$
0
0
I have been trying to install both the 32bit and 64bit of opmanager plugin for netflow.  We want to trial it and possibly purchase.

We have a central/probe design, I"m trying to install it on one of the probes.  After install there are no errors but it is just not listening on the ports.  I have changed the port to 8888 and all sorts of different ones with no luck.

Is there a trick to getting this plugin to install on 2012 server?  Should I be using the 32bit or 64bit.  I assume 64bit since my OS is but just confirming.
↧
Search

Re : Install of Netflow on windows 2012 server

August 3, 2015, 10:17 pm
$
0
0
PS I see this in the 'server_start_error' log:

NetFlow
'.\JREMigration.bat' is not recognized as an internal or external command,
operable program or batch file.
java.lang.UnsatisfiedLinkError: no AdventnetOper_64 in java.library.path
at java.lang.ClassLoader.loadLibrary(Unknown Source)
at java.lang.Runtime.loadLibrary0(Unknown Source)
at java.lang.System.loadLibrary(Unknown Source)
at com.adventnet.tools.prevalent.ROperation.<clinit>(ROperation.java:50)
at com.adventnet.tools.prevalent.Validation.doValidation(Validation.java:271)
at com.adventnet.tools.prevalent.ThreadWorn.validateWithoutAgreement(ThreadWorn.java:318)
at com.adventnet.tools.prevalent.ThreadWorn.validateInCommandLine(ThreadWorn.java:300)
at com.adventnet.tools.prevalent.ThreadWorn.initalize(ThreadWorn.java:278)
at com.adventnet.tools.prevalent.Wield.invokeNewLicense(Wield.java:697)
at com.adventnet.tools.prevalent.Wield.validateInvoke(Wield.java:349)
at com.adventnet.tools.prevalent.Wield.validateInvoke(Wield.java:197)
at com.adventnet.mfw.Starter.callMe(Starter.java:508)
at com.adventnet.mfw.Starter.start(Starter.java:329)
at com.adventnet.mfw.Starter.main(Starter.java:395)
java.lang.NullPointerException
at com.adventnet.mfw.Server.updateStatus(Server.java:705)
at com.adventnet.mfw.Server.shutDown(Server.java:790)
at com.adventnet.mfw.Starter$1.run(Starter.java:579)

↧
↧

Re : Install of Netflow on windows 2012 server

August 3, 2015, 10:18 pm
$
0
0
this is the 'server_start_stop' log:

Check webServerPort http value : 8888 https Port : null
PortCheckerUtil.getPort : serviceName :NETFLOW_LISTENER_PORT Flag : true
NFAPropFile :C:\MANAGE~1\OPMANA~1\NetFlow\bin\..\conf\netflow\nfa.properties
PortValue is : 9996
 Check for NetFlow Port with value :9996
PortCheckerUtil.checkPorts :9996
Starting Server from location: C:\ManageEngine\OpManagerProbe\NetFlow


Problem while Starting Server
System going to Shutdown --- received process interrupt
Shutting down the JVM now!


I changed the port for the webserver to 8888 because default would not work.
↧

Re : Install of Netflow on windows 2012 server

August 3, 2015, 10:28 pm
$
0
0
Hi,

Thank you for writing to us. You will have to install the same build as of Opmanager. If the opmanager is 64bit, you will need 64bit Netflow analyzer plug-in, irrespective of the OS build.
Login to Opmanager OLD UI>>Support>>Support and check if it is 32 or 64 bit installation.

Once done, Stop the Opmanager service and uninstall Netflow analyzer plug-in and remove the %opmanager%\Netflow folder.
Install the appropriate build of Netflow Analyzer plug-in from -
https://www.manageengine.com/network-monitoring/download.html

Start the Opmanager service and Netflow analyzer will start along. Wait for 5mins and try to login and update us.

Regards,
Karthik.K
Netflow Analyzer TAC
↧

Re : Install of Netflow on windows 2012 server

August 4, 2015, 12:00 am
$
0
0
So that seems to have done the trick to get it installed.  But now, i click netflow and its just hanging.  I'm going to try and reboot everything.

 I'll have to see why this probe is running 32bit.  I guess it was during install because there is no option to change during patch right?
↧

Re : Install of Netflow on windows 2012 server

August 4, 2015, 12:10 am
$
0
0
Hi,

Thanks for the update. You may try from a different browser and the first startup will take a little longer.
You will have to migrate the installation from 32 to 64bit, it can't be done with patches.

Regards,
Karthik.K
Netflow Analyzer TAC
↧
↧

Error Code : 10000 - Unable to shutdown or restart the Netflow Service

August 5, 2015, 3:44 am
$
0
0
Team,

 Unable to shutodn or restart the netflow service. am getting the below error. Pls do the needful.


Check webServerPort http value : 8080 https Port : null
PortCheckerUtil.getPort : serviceName :NETFLOW_LISTENER_PORT Flag : true
NFAPropFile :D:\Manage Engine\NetFlow\bin\..\conf\netflow\nfa.properties
PortValue is : 9996
 Check for NetFlow Port with value :9996
PortCheckerUtil.checkPorts :9996
Already Server seems to be running
Error Code : 10000
↧

Re : Error Code : 10000 - Unable to shutdown or restart the Netflow Service

August 5, 2015, 5:34 am
$
0
0
Hi,

Thank you for contacting us. Please restart the server and check on the status of the issue. It seems that the process is still running in the background. Restarting the server could resolve the issue.

Regards,
Deepu S
Netflow TAC
↧
Search

Re : Does NFA have a monthly interface utilization trend report?

August 5, 2015, 11:05 am
$
0
0
Hi,

Thank you for writing to us. You can generate Capacity Planning Report only based on Interfaces and IPgroups in NetFlow Analyzer and any time period you need.

Also, Capacity Planning Report is an add-on for NetFlow Analyzer, make sure you have this feature purchased for your License only the you can generate the Capacity Planning Report.

Thanks & Regards,

Aravind Lenin
Technical Support Engg- Netflow Analyzer
↧

Re : Flow Rate for system spesification

August 5, 2015, 11:18 am
$
0
0
Hi,

Thank you for writing to us. NetFlow Analyzer system requirement is only based on the flows received in the NetFlow Analyzer server and we do not have the option to predict the Flow rate on the server based on the Interfaces you are going to monitor in NetFlow Analyzer.

Please install NetFlow Analyzer on an server with the basic system requirement and mentioned in the below link and configure all your device that you want to monitor to send Flow packets to NetFlow Analyzer server, which will give you an fair idea regarding the flow rate on the server:

https://www.manageengine.com/products/netflow/system_requirement.html

Thanks & Regards,

Aravind Lenin
Technical Support Engg- Netflow Analyzer
↧
↧

Re : API

August 5, 2015, 11:22 am
$
0
0
Hi ,

Thank you for writing to us. Please refer the below API format to get the requested information:

Note: The REST API will only work from the build 10250 and above.


To get the Destination Data for an Interface for an selected time Period:

API Format:


Variables:

 apiKey: 92269d130a8190cc170dcd5c5a4b4805
Data: IN
DeviceID: 5000001
TimeFrame: today
isNetwork: false
ResolveDNS: false


Thanks & Regards,

Aravind Lenin
Technical Support Engg- Netflow Analyzer
↧

Re : Unable to get download details by LAN IP

August 5, 2015, 11:44 am
$
0
0
Hi ,

Thank you for writing to us. NetFlow Analyzer will show only the information exported by the Device to the NetFlow Analyzer server by the device. It seems that you and set an NAT or Proxy from WAN to LAN and that is the reason you can only the Static IP address where the Download traffic is routed over the LAN.

To overcome this, you can monitor an Internal core switch ( Flow Exported Supported ) from where all the LAN traffic is routed and get the information on the Internal LAN traffic details.

Thanks & Regards,

Aravind Lenin
Technical Support Engg- Netflow Analyzer


↧

Re : Only 1 SSID is visible in Netflow version 11.5, 3 SSID from WLC being enabled.

August 10, 2015, 11:48 am
$
0
0
Hi ManageEngine Team,

After the doing the process to resolved all SSID, and also the call support done to remotely visualize the real issue, we can still see traffics from 1SSID but not on the other SSIDs.

Please help on resolving this issue as we are really having problems and wanted to determine our wireless traffics.

Thanks,
Ryan P
↧
Viewing all 2315 articles
Browse latest View live
Search