How it Works
Fluke
Loading...
Computer Accessories
User Manual
88 pgs653.95 Kb0
Table of contents
Loading...

Fluke Computer Accessories User Manual

NetFlow Tracker
User’s Guide Version 3.5
May 2007 Copyright 2004 - 2007 Fluke Corporation. All rights reserved. All product names are trademarks of their respective companies.
w.flukenetworks.com
Contents
SOFTWARE LICENSE AGREEMENT 5
INTRODUCTION 15
What is NetFlow? 15
What is NetFlow Tracker? 15
Features and Benefits 15
INSTALLATION 17
Minimum System Requirements 17
Operating System Support 17
Pre-installation Checks 17
Installation on Microsoft Windows 18
Installation on Linux 19
Post-installation Tasks 19
USING NETFLOW TRACKER 21
Real-time Data 21
Long-term Data 21
Executive Reports 21
Network Overview 21
Devices 21
Per-AS data 23
Working with Charts 23
Working with Pie Charts 26
Working with Tabular Reports 26
Report Templates 28
Creating Filtered Reports 30
2
ONG-TERM REPORTS 35
L
Devices and Interfaces 35
Per-device and Per-interface Long-term Reports 35
Filter Editor 35
REPORTS 37
REPORT URL FORMAT 38
General Form 38
Report Format Parameters 38
Time Range Parameters 42
Filter Parameters 49
Security Parameters 54
Management Portal Access Control Parameters 55
PERFORMANCE TUNING 58
Disk Speed 58
Query Size 58
Database Server Settings 58
CONFIGURATION GUIDE 59
Licensing 59
Listener Ports 59
SNMP Settings 59
Device Settings 60
Security Settings 62
Management Portal Settings 63
Using Apache as a Portal Server 64
Report Settings 65
An Example Executive Report – Top Applications Today and This Week 70
3
P Application Names 72
I
DiffServ Names 72
Hostname Resolution Settings 72
AS Names 73
Subnet Names 73
Database Settings 73
Backup 74
Archiving 75
Memory Settings 75
Performance Counters 75
About 77
APPENDIX 1: DEVICE CONFIGURATION 78
Enabling NetFlow Export/NDE on a Cisco Router or Layer 3 Switch 78
Configuring NetFlow Input Filters for Traffic Class Reporting 83
Enabling Flow Detail Records on a Packeteer Device 83
Enabling NetFlow on an Enterasys Device 84
APPENDIX 2: CSV FILE FORMAT 85
Chart CSV format 85
Pie chart CSV format 85
Tabular report CSV format 85
APPENDIX 3: XML FORMAT 86
Chart XML format 86
Pie chart XML format 86
Tabular report XML format 86
APPENDIX 4: THIRD PARTY SOFTWARE COMPONENTS 87
4

Software License Agreement

This is a legal agreement between you (“You”/ “the End User””), and Fluke Corporation, a Washington corporation, its subsidiaries and affiliates, including Fluke Networks (“Fluke”), with offices at 6920 Seaway Boulevard, Everett, Washington, 98203, USA.
BY DOWNLOADING OR OTHERWISE ELECTRONICALLY RECEIVING THIS SOFTWARE PRODUCT (“PRODUCT”) IN ACCORDANCE WITH OUR SOFTWARE DELIVERY PROCEDURES OR BY OPENING THE SEALED DISK PACKAGE WHICH CONTAINS THE PRODUCT, YOU ARE AGREEING TO BE BOUND BY THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO THE TERMS OF THIS AGREEMENT, PROMPTLY DELETE THE DOWNLOADED OR ELECTRONICALLY RECEIVED SOFTWARE FROM YOUR COMPUTER SYSTEM AND NOTIFY US OF SAME IN ORDER TO CLAIM AND, IF YOU HAVE RECEIVED A SEALED CD-ROM PACKAGE, RETURN THE UNOPENED DISK PACKAGE AND THE ACCOMPANYING ITEMS (INCLUDING MANUALS) TO A FLUKE REPRESENTATIVE, FOR REFUND OF THE PRICE PAID.
1. GRANT OF LICENCE AND PAYMENT OF FEES
Provided that You have paid the applicable licence fee, Fluke grants You a non-exclusive and non­transferable, revocable licence to use one copy of the Product on the maximum number of servers and the maximum number of devices specified in your purchase order, or if not so specified, on a single server and a single device by a single user, and only for the purpose of carrying out your business in the country specified in your order. This Product is licensed for internal use by You, the end user only. The Product is not licensed for provision of a public service by You or for the provision of any fee generating service by You to a third party.
In the event that at any time You wish to extend the permitted number of servers or devices above the permitted amount, You must contact Fluke or the reseller from whom you purchased the Product (“the Reseller”) and an additional licence fee may be agreed and a new licence issued for the requested additional number of servers/devices.
Fluke or your Reseller may require that You provide written certification showing the geographical locations, type and serial number of all computer hardware on which the Software is being used, together with confirmation that the Product is being used in accordance with the conditions of this Agreement. You shall permit Fluke or your Reseller, and/or their respective agents to inspect and have access to any premises, and to the computer equipment located there, at or on which the Software is being kept or used, and any records kept pursuant to this Agreement, for the purposes of ensuring that the Customer is complying with the terms of this licence, provided that Fluke/your Reseller provides reasonable advance notice to the Customer of such inspections, which shall take place at reasonable times.
2. EVALUATION, UPDATES, UPGRADES AND SUPPORT AND MAINTENANCE
EVALUATION. If a provided licence key is labelled “Evaluation”, Fluke grants You the right to use the Product enabled by that key solely for the purpose of evaluation, and the Product will cease to function seven (7) days from enabling (or after such longer period as may be agreed by Fluke and confirmed by Fluke or your Reseller in writing), at which time the licence grant for that Product also ends. After the evaluation period, You may either purchase a full licence to use the Product from your Reseller or directly from Fluke, or You must promptly return to Fluke or cease to use the Evaluation Product and all associated documentation. The warranty set out in Clause 5 shall not apply in respect of Product downloaded for evaluation purposes.
UPDATES. Please refer to the release notes accompanying any new versions, updates or upgrades (“Updates”) prior to installation. Fluke will inform You or your Reseller of any Updates which it may develop from time to time and may licence any such Updates to You for a reasonable charge. To the extent that Fluke issues any Updates to You under the terms of this Agreement, any reference to the Product herein shall be deemed to include such Updates.
5
If You have purchased the maintenance and support services from Fluke then subject to payment of the support fees, Fluke shall provide such services in respect of the Product in accordance with the provisions of the Support and Maintenance Agreement contained in Appendix 1.
3. COPYRIGHT
All intellectual property rights in the Product belong to Fluke and You acknowledge that You have no ownership claims or rights whatsoever in the Product. You may (a) make one copy of the Product solely for backup or archival purposes and keep this securely, or (b) transfer the software to a secure single hard disk provided that You keep the original solely and securely for backup or archival purpose. You may not copy the written materials accompanying the Product. You shall not remove or alter Fluke’s copyright or other intellectual property rights notices included in the Product or in and any associated documentation. You must notify Fluke forthwith if You become aware of any unauthorized use of the Product by any third party.
4. OTHER RESTRICTIONS
You shall not sub-licence, distribute, market, lease, sell, commercially exploit, loan or give away the Product or any associated documentation. For the avoidance of doubt, this licence does not grant any rights in the Product to, and may not be assigned, sub-licenced or otherwise transferred to, any connected person, where the term connected person includes but is not limited to the End User’s subsidiaries, affiliates or any other persons in any way connected with the End User, whether present or future. The Product and accompanying written materials may not be used on more than the permitted number of servers at any one time or for in excess of the permitted number of devices. Subject always to any rights which You may enjoy under applicable law (provided that such rights are exercised strictly in accordance with applicable law) and except as expressly provided in this Agreement, You may not reproduce, modify, adapt, translate, decompile, disassemble or reverse engineer the Product in any manner. You shall not merge or integrate the Product into any other computer program or work, and You shall not create derivative works of the Product. Fluke reserves all rights not expressly granted under this Agreement.
5. LIMITED WARRANTY
Fluke warrants that during the warranty period (a) the Product will perform substantially in accordance with its accompanying written materials, and (b) the media on which the Product is furnished shall be free from defects in materials and workmanship. The warranty period applicable to the Product shall be ninety (90) days from the date of delivery of the Product or, if longer, the shortest warranty period permitted in respect of the Product under applicable law (“Warranty Period”). The warranty for any hardware accompanying the Product shall be as stated on the warranty card shipped with the hardware.
If, within the Warranty Period, You notify Fluke of any defect or fault in the Product in consequence of which the Product fails to perform substantially in accordance with its accompanying written materials, and such defect or fault does not result from You, or anyone acting with your authority, having amended, modified or used the Product for a purpose or in a context other than the purpose or context for which it was designed or licensed according to this Agreement, or as a result of accident, power failure or surge or other hazards, Fluke shall, at Fluke’s sole option and absolute discretion, do one of the following:
(i) repair the Product; or
(ii) replace the Product; or
(iii) repay to You all license fees which You have paid to Fluke under this Agreement.
Fluke does not warrant that the operation of the Product will be uninterrupted or error or interruption free.
6
. CUSTOMER REMEDIES
6
You must call your Fluke representative for an authorization to return any item during the 90 day warranty period referred to in clause 5 above, and You will be supplied with a return authorisation number and an address for returning the item together with a copy of your receipt. You acknowledge that your sole remedy for any defect in the Product will be Your rights under clause 5.
7. NO OTHER WARRANTIES
FLUKE AND/OR ITS SUPPLIERS, DISCLAIM ALL OTHER WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WITH RESPECT TO THE PRODUCT, THE ACCOMPANYING WRITTEN MATERIALS AND ANY ACCOMPANYING HARDWARE AND YOU AGREE THAT THIS IS FAIR AND REASONABLE. THE EXPRESS TERMS OF THIS AGREEMENT ARE IN LIEU OF ALL WARRANTIES, CONDITIONS, UNDERTAKINGS, TERMS OF OBLIGATIONS IMPLIED BY STATUTE, COMMON LAW, TRADE USAGE, COURSE OF DEALING OR OTHERWISE, ALL OF WHICH ARE HEREBY EXCLUDED TO THE FULLEST EXTENT PERMITTED BY LAW.
8. NO LIABILITY FOR CONSEQUENTIAL DAMAGES
IN NO EVENT SHALL FLUKE AND/OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, CONSEQUENTIAL OR ECONOMIC LOSS OR DAMAGES WHATSOEVER OR FOR ANY LOSS OF PROFITS, REVENUE, BUSINESS, SAVINGS, GOODWILL, CAPITAL, ADDITIONAL ADMINISTRATIVE TIME OR DATA ARISING OUT A DEFECT IN THE PRODUCT OR THE USE OF OR INABILITY TO USE THE PRODUCT, EVEN IF FLUKE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
9. TERMINATION
Either party shall be entitled forthwith to terminate this Agreement by written notice if the other Party commits any material breach of any of the provisions of this Agreement and, fails to remedy the same within sixty (60) days after receipt of a written notice from the non-breaching Party giving full particulars of the breach and requiring it to be remedied.
You shall be obliged to notify Fluke in writing of any change in the control or ownership of the End User and Fluke shall be entitled forthwith to terminate this Agreement by written notice.
This Agreement shall automatically terminate if replaced at any time with a new licence agreement.
The right to terminate this Agreement given by this clause 9 will be without prejudice to any other accrued right or remedy of either Party including accrued rights or remedies in respect of the breach concerned (if any) or any other breach, or which the Parties have accrued prior to termination.
10. INDEMNIFICATION
You shall indemnify Fluke in full and hold Fluke harmless in respect of any loss, damages, proceedings, suits, third party claims, judgements, awards, expenses and costs (including legal costs) incurred by or taken against Fluke as a result of the negligence, fault, error, omission, act or breach of You or of your employees, staff, contractors, agents or representatives or for any breach of this Agreement whatsoever by You.
Notwithstanding any other provision of this Agreement, the aggregate liability of Fluke for or in respect of all breaches of its contractual obligations under this Agreement and for all representations, statements and tortious acts or omissions (including negligence but excluding negligence causing loss of life or personal injury) arising under or in connection with this Agreement shall in no event exceed the licence fee paid by You pursuant to this Agreement prior to the date of the breach.
7
1. CONFIDENTIAL INFORMATION AND SECURITY
1
During and after this Agreement, the Parties will keep in confidence and use only for the purposes of this Agreement all Confidential Information. Confidential Information means information belonging or relating to the Parties, their business or affairs, including without limitation, information relating to research, development, Product, processes, analyses, data, algorithms, diagrams, graphs, methods of manufacture, trade secrets, business plans, customers, finances, personnel data, and other material or information considered confidential and proprietary by the Parties or which either Party is otherwise informed is confidential or might or ought reasonably expect that the other Party would regard as confidential or which is marked "Confidential". For the avoidance of doubt, You shall treat the Product and any accompanying documentation as Confidential Information. Confidential Information does not include any information (i) which one Party lawfully knew before the other Party disclosed it to that Party; (ii) which has become publicly known through no wrongful act of either Party, or either Parties’ employees or agents; or (iii) which either Party developed independently, as evidenced by appropriate documentation; or (iv) which is required to be disclosed by law.
The Parties will procure and ensure that each of its employees, agents, servants, sub­contractors and advisers will comply with the provisions contained in this clause. If either Party becomes aware of any breach of confidence by any of its employees, officers, representatives, servants, agents or sub-contractors it shall promptly notify the other Party and give the other Party all reasonable assistance in connection with any proceedings which the other Party may institute against any such person. This clause 11 shall survive the termination of this Agreement.
notwithstanding the above confidentiality provisions, in accepting this licence agreement, You agree that, subject to any applicable data protection laws, Fluke may use your business name and logo for the purposes of marketing and promotion of the product and its business and You hereby grant Fluke a limited licence to use your business name and logo for these purposes.
12. EXPORT CONTROL
You shall be responsible for and agree to comply with all laws and regulations of the United States and other countries (“Export Laws”) to ensure that the Product is not exported directly, or indirectly in violation of Export Laws or used for any purpose prohibited by Export laws.
13. GOVERNING LAW AND JURISDICTION
13.1 This Agreement and all relationships created hereby will in all respects be governed by and construed in accordance with the laws of the state of washington, united states of america, in respect of all matters arising out of or in connection with this agreement. The Parties hereby submit to the exclusive jurisdiction of the washington Courts. NOTHING IN THIS CLAUSE SHALL PREVENT FLUKE FROM TAKING AN ACTION FOR PROTECTIVE OR PROVISIONAL RELIEF IN THE COURTS OF ANY OTHER STATE.
14. MISCELLANEOUS
14.1 The provisions of clauses 3, 7, 8, 10, 11, 12, 13 and 14 and the obligation on you to pay the licence fee shall survive the termination or expiry of this Agreement.
14.2 This Agreement is personal to You and You shall not assign, sub-licence or otherwise transfer this Agreement or any part of your rights or obligations hereunder whether in whole or in part save in accordance with this Agreement and with the prior written consent of Fluke and You shall not allow the Product to become the subject of any charge, lien or encumbrance of whatever nature. Nothing in this Agreement shall preclude the Licensor from assigning the Product or any related documentation or its rights and obligations under this Agreement to a third party and You hereby consent to any such future assignment.
14.3 This Agreement and the Support and Maintenance Agreement supersede all prior representations, arrangements, understandings and agreements between the Parties herein relating to the subject matter hereof, and sets out the entire and complete agreement and understanding between the Parties relating to the subject matter hereof.
8
14.4 If any provisions of the Agreement are held to be unenforceable, illegal or void in whole or in part the remaining portions of the Agreement shall remain in full force and effect.
14.5 No party shall be liable to the other for any delay or non-performance of its obligations under this Agreement (save for your obligation to pay the fees in accordance with clause 1) arising from any cause or causes beyond its reasonable control including, without limitation, any of the following: act of God, governmental act, tempest, war, fire, flood, explosion, civil commotion, industrial unrest of whatever nature or lack of or inability to obtain power, supplies or resources.
14.6 A waiver by either party to this Agreement of any breach by the other party of any of the terms of this Agreement or the acquiescence of such party in any act which but for such acquiescence would be a breach as aforesaid, will not operate as a waiver of any rights or the exercise thereof.
14.7 No alterations to these terms and conditions shall be effective unless contained in a written document made subsequent to the date of the terms and conditions signed by the parties which are expressly stated to amend the terms and conditions of this Agreement.
9
Appendix 1 to End User Licence
Terms and Conditions for Fluke Support and Maintenance Service
1. Definitions
1.1 In this Agreement and in the Schedules hereto, save where the context so admits or requires, the following definitions shall have the following meanings:
“Intellectual Property Rights” includes, without limitation, copyrights, discoveries, concepts, domain names, patents, secret processes, database rights, technologies, know how, inventions, ideas, improvements, information, trade secrets, all copyright works, business methods, logos, designs, trademarks, service marks, topography and semi-conductor chip rights, business names, literary, dramatic, musical and artistic works anywhere in the world (whether any of the foregoing is registered or unregistered and including any application in relation to any of the aforesaid).
“Licence Agreement” means the product licence agreement under the terms of which the Product is licensed to You and which is entered into simultaneously with this Agreement.
“Retail Prices Index” means that the Consumer Price Index as published monthly by the Central Statistics Office or Ireland or any of its successors.
“Support Charges” shall mean the applicable annual support fee as published in Fluke’s price list.
“Support Hours” means those hours specified in the Schedule during which Fluke shall provide the Support Services described in this Agreement.
“Support Services” shall mean the maintenance and support services provided by Fluke under the terms of this Agreement as detailed in the Schedule.
"Working Day" means any day other than Saturday or Sunday or a bank or a public holiday in Ireland.
Capitalised terms which are not defined herein shall have same meaning as under the Licence Agreement.
1.2 In the event of any inconsistency between the Schedule and any terms or provisions of any clause contained in this Agreement, the terms or provisions in the clause of the Agreement shall prevail.
1.3 Words in the singular shall include the plural and vice versa where the context so admits or requires and words importing one gender include every other gender.
1.4 The headings in this Agreement are for ease of reference only and do not form part of the contents of this Agreement and shall not affect its interpretation.
1.5 Save as provided for elsewhere in this Agreement, this Agreement including the Schedule represents the entire of the understanding of the parties concerning the subject matter hereof, viz, the provision of support and maintenance services by Fluke to You, and overrides and supersedes all prior promises, representations, understandings, arrangements, agreements, letters of intent or heads of agreement concerning the same which are hereby revoked by mutual consent of the parties.
1.6 No alterations to these terms and conditions shall be effective unless contained in a written document made subsequent to the date of the terms and conditions signed by the parties which are expressly stated to amend the terms and conditions of this Agreement.
10
1.7 The contents of the Schedule form an integral part of this Agreement and shall have as full effect as if it were incorporated in the body of this Agreement and the expressions “this Agreement” and “the Agreement” used in the Schedule shall mean this Agreement and any reference to “this Agreement” shall be deemed to include the Schedule.
2. Support Services
2.1 In consideration of the payment by You of the Support Charges, Fluke agrees to provide the Support Services.
3. Support Charges
3.1 You shall pay the Support Charges to Fluke annually in advance. The Support Charges shall be paid within 30 days after receipt of Fluke’s invoice thereof. No Support Services will be provided until payment in full has been received by Fluke. In the event of late payment, interest shall be charged at the rate of interest referred to in the European Communities (Late Payment in Commercial Transactions) Regulations 2002, from the date of invoice until the date of actual payment, such interest to accrue daily and both before and after judgement.
3.2 The Support Charges (including the charges for support outside of the Support Hours) may at Fluke’s sole discretion be increased annually in accordance with the annual increase in the Retail Prices Index.
3.3 The Support Charges payable under the terms of this Agreement are related to the Support Services specified in Schedule 2. Additional support is subject to Fluke’s then standard rates.
3.4 All Support Charges referred to in this Agreement are exclusive and net of any taxes, duties or such other additional sums which shall be paid by You including, but without prejudice to the generality of the foregoing, VAT, excise tax, tax on sales, property or use, import or other duties whether levied in respect of this Agreement, the Support Services or otherwise.
4. Undertakings by You
You undertake:
4.1 To maintain accurate and up to date records of the number and location of all copies of the Product supplied to You under the terms of the Licence Agreement and in relation to the numbers of users of such.
4.2 To co-operate with Fluke’s personnel in the diagnosis of any error or defect in the Product or Updates reported by You.
4.3 To make available to Fluke, all reasonable information, facilities, services and access required by Fluke in order to perform the Support Services.
5. Supplier’s Undertakings
5.1 Fluke shall use its reasonable commercial endeavours to ensure that the Support Services will be performed in such a way as to cause only minimal interruptions to your business processes (other than any pre-agreed unavoidable interruption which in Fluke’s sole discretion is required in order to perform the Support Services in a proper and efficient manner).
5.2 Fluke shall use its reasonable commercial endeavours to ensure that the Support Services are performed with reasonable skill and care.
5.3 The express terms of this Agreement are in lieu of all warranties, conditions, undertakings, terms of obligations implied by statute, common law, trade usage, course of dealing or otherwise, all of which are hereby excluded to the fullest extent permitted by law.
11
5.4 Without prejudice to the generality of clause 5.3 and for the avoidance of doubt, to the fullest extent permitted by law all terms implied by Sections 13, 14 and 15 of the Sale of Goods Act, 1893 are hereby excluded and all terms implied by the Sale of Goods and Supply of Service Act, 1980 including, without prejudice to the generality of the foregoing, Section 39, are hereby excluded and the parties agree that this is fair and reasonable.
6. Limitation of Liability and indemnity
6.1 You shall indemnify Fluke in full and hold Fluke harmless in respect of any loss, damages, proceedings, suits, third party claims, judgements, awards, expenses and costs (including legal costs) incurred by or taken against Fluke as a result of the negligence, fault, error, omission, act or breach of You or of your employees, staff, contractors, agents or representatives or for any breach of this Agreement whatsoever by You.
6.2 In no event will Fluke be liable to You for any special, incidental, indirect, punitive or consequential loss or damages, any loss of business, revenue or profits, loss of use, loss of data, loss of savings or anticipated savings, loss of investments, loss of goodwill, capital costs or loss of extra administrative cost, whether occasioned by the negligence, fault, error, omission, act or breach of the Fluke, its employees, contractors or sub-contractors whether or not foreseeable, arising out of or in connection with this Agreement, whether in an action based on contract, equity or tort including negligence or other legal theory.
6.3 Notwithstanding any other provision of this Agreement, the aggregate liability of Fluke for or in respect of all breaches of its contractual obligations under this Agreement and for all representations, statements and tortious acts or omissions (including negligence but excluding negligence causing loss of life or personal injury) arising under or in connection with this Agreement shall in no event exceed the Support Charges paid by You pursuant to this Agreement prior to the date of the breach.
7. Intellectual Property Rights
7.1 Ownership of all Intellectual Property Rights in the Product and any accompanying documentation is governed by the provisions of the Licence Agreement.
8. Termination
8.1 You can terminate this Agreement at any time after the first anniversary of this Agreement by giving to Fluke not less than 90 days’ written notice.
8.2 Either Party may terminate this Agreement by written notice to the other Party where:
8.2.1 the other party has committed a material breach of the terms or conditions of this Agreement including the terms, conditions and provisions of the Schedule and where the breaching party has failed to remedy such breach within sixty (60) days after receiving written notice from the non-breaching party requiring it so to do; and
8.2.2 the other party makes any arrangement or composition with its creditors or pass a resolution or where a Court shall make an order that the defaulting party shall be wound up (save and excepting only a member's winding up for the purposes of reconstruction or amalgamation to which the other party has been approved in writing prior to such) or where an examiner or a receiver or a liquidator is appointed over the other a Party’s business.
8.3 On termination of this Support Agreement all rights and obligations of the parties under this Support Agreement shall automatically terminate except for any rights of action which may have accrued prior to termination and any obligations which expressly or by implication are intended to commence or continue in effect on or after termination.
12
. Confidential Information and Security
9
9.1 During and after this Agreement, the Parties will keep in confidence and use only for the purposes of this Agreement all Confidential Information. Confidential Information means information belonging or relating to the Parties, their business or affairs, including without limitation, information relating to research, development, Product, processes, analyses, data, algorithms, diagrams, graphs, methods of manufacture, trade secrets, business plans, customers, finances, personnel data, and other material or information considered confidential and proprietary by the parties or which either party is otherwise informed is confidential or might or ought reasonably expect that the other party would regard as confidential or which is marked "Confidential". Confidential Information does not include any information (i) which one party knew before the other party disclosed it to that party; (ii) which has become publicly known through no wrongful act of either party, or either parties’ employees or agents; or (iii) which either party developed independently, as evidenced by appropriate documentation; or (iv) which is required to be disclosed by law.
9.2 The Parties will procure and ensure that each of its employees, agents, servants, sub­contractors and advisers will comply with the provisions contained in this clause.
9.3 If either Party becomes aware of any breach of confidence by any of its employees, officers, representatives, servants, agents or sub-contractors it shall promptly notify the other Party and give the other Party all reasonable assistance in connection with any proceedings which the other Party may institute against any such person.
9.4 This clause shall survive the termination of this Agreement.
10 Miscellaneous
10.1 This Agreement is personal to You and You shall not assign, sub-licence or otherwise transfer this Agreement or any part of its right or obligations hereunder whether in whole or in part without the prior written consent of Fluke. Nothing in this Agreement shall preclude Fluke from assigning or sublicensing its rights and obligations under this Agreement.
10.2 If any provisions of the Agreement are held to be unenforceable, illegal or void in whole or in part the remaining portions of the Agreement shall remain in full force and effect.
10.3 No Party shall be liable to the other for any delay or non-performance of its obligations under this Agreement (save for the obligation of You to pay the Support Charges in accordance with clause 3) arising from any cause or causes beyond its reasonable control including, without limitation, any of the following: act of God, governmental act, tempest, war, fire, flood, explosion, civil commotion, industrial unrest of whatever nature or lack of or inability to obtain power, supplies or resources.
10.4 A waiver by either party to this Agreement of any breach by the other party of any of the terms of this Agreement or the acquiescence of such party in any act which but for such acquiescence would be a breach as aforesaid, will not operate as a waiver of any rights or the exercise thereof.
10.5 No alterations to these terms and conditions shall be effective unless contained in a written document made subsequent to the date of the terms and conditions signed by the parties which are expressly stated to amend the terms and conditions of this Agreement.
10.6 This Agreement and all relationships created hereby will in all respects be governed by and construed in accordance with the laws of Ireland in respect of all matters arising out of or in connection with this agreement. The Parties hereby submit to the exclusive jurisdiction of the Irish Courts. NOTHING IN THIS CLAUSE SHALL PREVENT FLUKE FROM TAKING AN ACTION FOR PROTECTIVE OR PROVISIONAL RELIEF IN THE COURTS OF ANY OTHER STATE.
13
Schedule
Support Services
1. Support Hours
The Support Hours during which Fluke shall supply the Support Services shall be between
9.30am and 5pm on Working Days.
2. Support Services
Fluke shall provide You during the Support Hours with:
2.1. technical advice and assistance by telephone, facsimile, e-mail or other electronic means as shall be necessary to resolve your difficulties and queries in relation to the Product and the Updates which You may require;
2.2. an error correction and problem solving service as follows:
if You shall discover that the then current supported version of Product fails to conform with any part of the description of the Product provided to you by Fluke then Fluke, on receiving notification of the error, shall use its reasonable endeavours to:
2.2.1 diagnose and resolve the reported error or problem; and
provide the required solution to remedy or correct the error or problem; and
2.2.3 provide You with all assistance reasonably required by You to enable You to implement the error correction supplied as soon as possible; and
2.2.4 correct errors by “fix” where Fluke, in its sole discretion, considers such to be appropriate.
2.3 Response times to technical advice and assistance queries and reported errors and problems are set out in clause 3 below.
2.4 Remote connection support shall only be provided by Fluke in the event that telephone, fax or email support does not resolve a problem.
3. Response Times
3.1 In the event of any problem arising in relation to the Product’s installation and functioning, Fluke shall respond within 8 Support Hours after the logging of such an incident by You provided that the incident was logged by You during normal Support Hours. Fluke shall in turn endeavour to resolve the problem as soon as possible.
4. Exceptions to Support Services
4.1 The Support Services described in clause 2 of this Schedule shall not include service in respect of:
4.1.1 defects or errors resulting from any modifications of the Product or Updates made by any person other than Fluke;
4.1.2 incorrect use of the Product or Updates or operator error;
4.1.3 any fault in Your hardware, computer equipment or in any programs used in conjunction with the Product or Updates; or
4.1.4 defects or errors caused by the use of the Product or Updates on or with equipment or programs not approved by Fluke.
14

Introduction

This document is the user manual for NetFlow Tracker, a software product designed to collect NetFlow information from Cisco equipment and present it in a meaningful way. This document does not provide any assistance with Cisco equipment itself. Please consult your Cisco documentation for any queries you have relating to the equipment itself. For more information on NetFlow from the Cisco website, go to
http://www.cisco.com/go/netflow

What is NetFlow?

A network flow is a sequence of packets between a given source and destination in one direction only. Cisco routers store and export information about the network flows they handle for network management purposes; high-end routers and switches use network flows to accelerate security processing. In order to distinguish flows from one another, the source and destination addresses and application (TCP/UDP) port numbers are used. The IP Type of Service byte, protocol type and the ifIndex of the input interface are also used to uniquely identify the flow to which a packet belongs.

What is NetFlow Tracker?

.
NetFlow Tracker provides a powerful but easy-to-use set of dynamic charts and reports to help the network administrator make sense of the traffic flow information provided by his routers.

Features and Benefits

• Highly detailed view of network traffic without the need for costly probes.
• Web-based front end allows users anywhere on the network to use the system.
• Straightforward installation and configuration.
• Can be installed on Windows and Linux servers.
• Native support for sFlow without the need to use an external converter.
• Per-minute resolution.
• Traffic statistics visible just minutes after the event.
• Allows rapid diagnosis of network congestion and failure.
• Useful when configuring QoS to examine the effect of a change in policy.
• Stores one week of full information by default.
• All real-time reports and charts can be filtered on any field.
• Every real-time report and chart allows drilldown on each row or area.
• Every real-time chart allows zooming in and drilling down on a selected time range.
• Custom long-term reports and charts can be created.
• Custom executive reports can be defined and easily accessed.
15
Every report and chart can be formatted as CSV or XML for further processing or
•
as simplified HTML or PDF for printing or emailing.
• Straightforward URL format for linking current, automatically updated charts into other applications.
• Optimized database structure ensures fast report generation under heavy load.
16

Installation

Minimum System Requirements

The type of system required to run NetFlow Tracker depends on the number of devices sending NetFlow information to it and the amount and nature of traffic handled by those devices. The following requirements are a guideline; the only way to determine your requirements is by testing the software’s performance in your network environment.
• Intel Pentium D, Core 2 or Xeon processor or a compatible processor of similar performance. Multiple processors will improve performance but should be considered after increasing RAM and the performance of the disk subsystem.
• 2GB RAM. Performance will increase with the amount of RAM available for the disk cache and database buffers.
• High performance disk subsystem with substantial free space – the exact nature of this is dependent on system load. For all but the lightest of loads, a server RAID card running RAID 5 over at least three high-performance disks is recommended. NetFlow Tracker stores and queries full information for a week; a busy enterprise router can generate in the order of 20GB to 50GB of NetFlow information in this time.

Operating System Support

• Microsoft Windows2000 or Microsoft Windows Server 2003. Desktop operating systems are not supported.
• Any modern Linux distribution capable of running Java 1.4.2 and MySQL5.0 (Intel-compatible processors).

Pre-installation Checks

Before installing, there are a few things you need to check:
• NetFlow Tracker puts a heavy load on the system. It is strongly recommended that you install it on a dedicated server.
• You must be logged in as an administrator in order to install the software.
• NetFlow Tracker uses MySQL to provide database services. Due to the large
database size and optimised structure, MySQL must be configured in a way that would seriously degrade the performance of many other types of software that use MySQL. Thus it is recommended that no other MySQL-dependent software be installed on the server running NetFlow Tracker.
• The version of MySQL used by NetFlow Tracker is significantly different to that used by Fluke Networks’ products NetFlow Monitor, NetWatch and ResponseWatch. If NetFlow Tracker is installed on a server running one of these products it will not function correctly. Likewise, if one of these products is installed on a server running NetFlow Tracker, both products are likely not to function correctly.
17
NetFlow Tracker contains an embedded web server. Web servers normally run on
•
port 80, but this may be in use by another web server on your system. You can choose a different port during installation or disable other web servers prior to
nstallation if you wish.
i
• If you have previously configured a router for NetFlow Monitor, note that NetFlow Tracker requires a different active flow timeout or long aging timer be configured. See Appendix 1 for more information.

Installation on Microsoft Windows

Installation is straightforward and should take no more than a few minutes. If you received NetFlow Tracker on CD the setup program should start automatically. If not, simply open the CD drive in My Computer and double-click “setup.exe”. If you downloaded the software simply double-click the file you downloaded.
Installation involves several steps. At each step, you can click the “Next >” button to accept the default choices and continue.

Unsupported MySQL detection

If MySQL is installed on the server already, you will see a message informing you of this and asking if you wish to continue. While it is not recommended that you do continue, it is possible. Note however that NetFlow Tracker was tested with the version of MySQL it ships with and may not function correctly with a different version. The installation program will fail if the installed version of MySQL uses a root password.

Java Runtime Environment installation

If the server does not have the required version of the Java Runtime Environment installed, you will be prompted to press Ok to install it. It will take several seconds to launch the Java installer, after which you must accept Sun’s licence agreement. You will then be given the choice of Typical or Custom installation; if you wish not to have your web browser configured to use Sun’s Java Plug-in you must choose Custom installation.

Welcome & Licence Agreement

Once the Java Runtime Environment is installed, you can press the “Next >” button to view Fluke Networks’ licence agreement, which you must agree to before pressing “Next >” again.

Customer Information

You will be asked to provide your name and company name, and whether to install the software just for yourself or for every user that logs in to the system. If you choose to install the software just for yourself, only you will see the shortcut to the web front-end and only you will be able to uninstall the software.

Setup Type

If you choose “Complete” NetFlow Tracker will be installed to the folder “nftracker” on your system drive, MySQL to the folder “MySQL” on the same drive, and the internal web server will run on port 80 if available. If port 80 is unavailable you will be prompted to choose another. If you want to change the install folders or choose a different port even if 80 is available you must choose “Custom”.
18
ustom Setup
C
You will only see this dialog if you chose custom setup above. You should see options for NetFlow Tracker and MySQL, unless an unsupported version of MySQL was detected. To change the install folder for either NetFlow Tracker or MySQL, click on
he feature and then on “Change…”.
t

Select HTTP Port

You will only see this dialog if you chose custom setup or if port 80 is in use. You can choose a port and press “Test” to check if it is available, or simply press “Next >” which will not allow you to proceed if the port is unavailable.

Ready to Install

Click “Install” to start. Installation should take no more than a few minutes; if it appears to have stopped for a long time you should contact Fluke Networks. When installation is complete you can click “Finish” to close the install program.

Accessing the web front-end

The install program will have placed a shortcut to the web front-end in a folder called “NetFlow Tracker” in the Programs section of your start menu.

Installation on Linux

Instructions for a fresh install or an upgrade are available with the program files from Fluke Networks’ web site. Please contact support@flukenetworks.com
for more details.

Post-installation Tasks

Access the web front-end

You can access the web front-end from any workstation on the network by opening the following address in a web browser:
http://address:port
Where “address” is the address of the server and “port” is the http port you chose, or 80 if you didn’t choose a port.
Note that the web browser must support Java applets; when you installed the Java Runtime Environment it will have set up any browsers on the server with this capability, but you may find that other machines on your network do not display applets correctly, especially those running Windows XP. You can easily download the Java Plug-in from
http://www.javasoft.com

Open the settings page

The first thing you’ll see when you access the web front-end is a splash screen displaying the product version and your licence details. This will disappear after a few seconds, or you can click anywhere on the page to dismiss it. You can then click on “Settings”.
if you find a browser that does not support Java applets.

Install your licence

If you have a full or trial licence you should install it using the Licensing
settings page.
19
et up SNMP community strings
S
If any of the devices you intend monitoring do not use a read-only SNMP community of “public” you will need to add their communities to the list in SNMP Settings

Add listener ports

If you intend monitoring more than one device it is recommended that you set up one listener port per device rather than use the default port 2055 for all of them. You can add ports in the Listener Ports

Set up web front-end security

If you wish to set passwords to protect access to the web front-end and the settings pages you can do so in Security Settings

Configure your routers and switches

You must configure your devices to send NetFlow exports to the server running NetFlow Tracker, and to allow the server read-only SNMP access. Even if you have set up NetFlow before, please read the configuration guide in Appendix 1

Verify that data is being received

You can check that data is being received from a device by looking for it in the
Performance Counters
ensure that SNMP access was successful.
settings page. You should also check the Device Settings to
settings page.
.
.
.
20

Using NetFlow Tracker

Once you have installed NetFlow Tracker and configured your devices, data will be available within a few minutes. There are many ways to access this data.

Real-time Data

NetFlow Tracker stores up to fourteen days full NetFlow data with one minute resolution. This data can be reported upon once it is several minutes old. There are several ways to view reports on this data – from the Network Overview

Devices

page or from the Filter Editor.

Long-term Data

In addition to automatically storing full data for up to fourteen days, NetFlow Tracker can be configured to store summarized data for any length of time. Long-term data is not stored automatically; long-term reports must first be set up using the Report
Settings page. See the Long-term Reports chapter for more about setting up and
viewing long-term reports.
page, from the

Executive Reports

You can configure custom reports using the Report Settings page that contain sections from multiple real-time or long-term reports. See the Executive Reports more about setting up and viewing executive reports.
chapter for

Network Overview

The Network Overview page is accessible from the home page of the software; if you do not have user security set up (see Security Settings see when you access the software.
The page gives you a simple overview of the devices and interfaces currently carrying the most traffic on your network. You can click on a device in the pie chart or on its name to see its top applications and busiest interfaces; you can also click on an interface name to see its recent traffic and top applications. It is also possible to drilldown from any of the charts to examine the data in more detail; see Working with
Charts for more about this.
) it is also the default page you
Devices
While the Network Overview page is useful for quickly identifying the busiest devices and interfaces on your network, the Devices page lists all devices regardless of how busy they are. You can sort the devices by name, address, recent peak traffic rate and recent peak packet rate by clicking the appropriate column header. By default, each peak rate is the highest two-minute rate in the last six hours, but this will be different if the default time range is altered (see Report Settings refreshed regularly to ensure it is always up-to-date.
). Note that the report is
21
evice traffic meters
D
In addition to the orderable columns there are two graphical meter columns that allow you to instantly see which devices are currently busy. Each chart shows you the recent peak and the current rate:
Each chart is scaled relative to the busiest device; this ensures that a high value on a chart indicates a relatively high traffic or packet rate.
If you click on either of the meters, you will open a chart of the device’s recent activity in terms of traffic or packets over time. By default the last six hours will be shown. There are various controls you can use to manipulate the chart and examine areas of it more detail; for more see Working with Charts

Interfaces

If you click on a device’s name, you will open a page listing all of that device’s interfaces. The interfaces can be sorted by name, recent peak utilisation in either direction, recent peak traffic rate in either direction and recent peak packet rate in either direction. The graphical columns on the interface status report show the recent peak and current rates in each direction on each interface:
below.
The scale of the chart depends on which column it is in; the “% Utilisation” column scales each row of each chart according to the configured speed of the interface in that direction whereas the “Relative Traffic” and “Relative Packets” are scaled relative to the busiest direction of the busiest interface. This ensures that a high value on a chart indicates either high utilisation or a relatively high traffic or packet rate. Note that you can change the speed of an interface in Device Settings do this for an asynchronous interface. You can also use the Device Settings page to hide interfaces that never export any NetFlow data.
To examine an interface in more detail you can click on its name or any of its meters. If you are unsure about which interface you want to examine, hover the mouse pointer over the interface’s name to see its speed, type and extended description if available. When you click on an interface, you will open a chart showing the interface’s recent bi­directional utilisation, traffic rate or packet rate over time; see Working with Charts below for more on the various controls.
; you will certainly need to
22

Per-AS data

If your router uses BGP to route traffic it will provide source and destination origin or peer AS numbers in its NetFlow data. NetFlow Tracker creates optimised bi-directional charts for each AS just as it does for each interface. An AS chart is only available for a single device as otherwise there is a high chance that some or all traffic will be accounted for multiple times by multiple routers. You can use the Filter Editor a report or chart based upon an AS and data from multiple routers.
To view the ASes routed by a given router, click the ASes link in the navigation menu at the top of the interface report:
The AS list is similar to the interfaces list, but does not show percentage utilisation.
to create

Working with Charts

Charts are one of the most useful ways of working with data in NetFlow Tracker. A chart lets you quickly pick out an area of interest to examine in further detail.
A chart displays the elements that contributed most to the overall total traffic or packet rate over the charted time range. By default, at most ten elements are charted but this can be configured in the Report Settings
page.

Viewing earlier or later data

You can easily look at earlier or later data by using the forward and back buttons above the chart:
Note that when you open a device or interface chart from the device or interface lists it will automatically to keep up to date, but using the forward or back buttons will prevent this from happening.

Changing the displayed chart

All charts have several views, only one of which is displayed at a time. You can change which one is displayed using the tabs above the chart:
In this case, the utilisation chart is displayed and the corresponding tab is raised.

The chart legend

Each charted element has a corresponding row in the legend below the chart. The legend may also have a row for other elements that were not big enough to be charted separately. Depending on the type of chart, some elements in the legend may be underlined; this indicates that more information is available by hovering the mouse over the text.
23
ooming in
Z
You can zoom in to the chart by clicking the zoom in button on the toolbar:
This will zoom in on the centre of the chart. If you want to zoom in on a particular selection, see Selecting a time range from automatically refreshing.

Zooming out

You can zoom out from the chart by clicking the zoom out button on the toolbar:
This will zoom out from the centre of the chart and will again stop the chart from automatically refreshing.

Selecting a time range

If you wish to zoom in on a particular time range you can do so by clicking and dragging the mouse across the chart. You can then zoom in on the selection using the zoom in toolbar button.

Selecting the entire time range

You can select the entire visible time range using the select all toolbar button:
below. Note that zooming in will stop the chart

Examine selected data

Once you have selected a time range the right mouse button on the selection. A context menu will pop up, allowing you to create another chart based upon any one of or all of the charted elements during the selected time range. If the chart is automatically refreshing and you used the select all button to select the time range the new chart will also automatically refresh. The types of chart you can create are described in Report Templates

View a standard chart as a pie chart

Most charts allow you to open a pie chart of the entire charted time range by clicking the pie chart toolbar button:
See Working with Pie Charts below for more about tabular reports.

View a standard chart as a tabular report

Most charts allow you to open a tabular report of the entire charted time range by clicking the report toolbar button:
See Working with Tabular Reports below for more about tabular reports.
as above, you can “drill down” into it by clicking
below.
24
lter the filter applied to a standard chart
A
Most charts allow you to change the applied filter by click the filter editor toolbar button:
See Creating Filtered Reports for more about the filter editor.

View resolved domain names

If a chart shows IP addresses several of them may be underlined; this indicates that you can see the resolved domain name by hovering the mouse over the address. You can attempt to resolve more of the addresses by clicking the refresh toolbar button:
You can also reload the chart with all resolvable domain names shown in full by clicking the resolve all button:
If all resolvable domain names are displayed you can revert to the normal display of just addresses by clicking the resolve available toolbar button:

Export a chart to another application

You can convert a chart to a comma-separated value (CSV) file by clicking the CSV toolbar button:
You will be prompted to open or save the file; most databases and spreadsheets should be able to understand the format, described in Appendix 2
You can also convert the chart to an XML format by clicking the XML toolbar button:
The XML format is documented in Appendix 3.

Print the chart

You can open a version of the currently displayed chart that is designed for printing or archiving by clicking the print button:

Open the chart as a PDF

You can open the currently displayed chart as a PDF file by clicking the PDF button:
You will need to have Adobe Reader installed to view PDFs.
.

Open the chart in a new window

You can open the chart in its own window using the new window toolbar button:
25

Working with Pie Charts

ost chartscan be displayed instead as a pie chart. Rather than breaking the selected
M time range into small chunks and charting each one, a pie chart shows each of the top element’s proportion of the total octets or packets during the entire time range.
Most of the toolbar buttons used for working with a chart are also used for working with a tabular report; however there are some differences.

View a pie chart as a standard chart

You can view a pie chart as a chart over time by clicking the chart toolbar button:

Working with Tabular Reports

Most charts can be displayed instead as a tabular report. Rather than breaking the selected time range into small chunks and charting each one, a tabular report shows the entire time range in one table. A tabular report also shows every contributing element rather than just the largest ones.
Many of the toolbar buttons used for working with a chart are also used for working with a tabular report; however there are some differences.

Filtered utilisation

If the source data for a report is filtered by interface, the total utilisation of all the traffic displayed in the report as a percentage of the interface bandwidth is shown under the interface name. This can help you judge whether an element’s traffic is significant or not.

View a tabular report as a chart

You can view a report as a chart by clicking the chart toolbar button:

View more rows of a tabular report

If there are more than twenty-five rows in a report it will be displayed in multiple pages to avoid long download times. The row above the column headings shows where you are in the report and allows you to page through it:
The buttons to the left of the scrollbar move to the first page of the report and back one page, respectively. Since the first page of the report is shown already, these buttons are unavailable. The buttons to the right of the scrollbar move forward one page and to the last page respectively. Clicking anywhere in the scrollbar will move to the corresponding position in the report; i.e., if you click one-third of the way along the scrollbar the page one-third of the way into the report will be shown. A blue line or box on the scrollbar indicates what page is shown and how much of the report the page represents.
26
ort a tabular report
S
A report can be sorted on any of the columns describing the reported elements, or can be sorted by traffic or packet rate. Simply click the column heading – if you click a column heading twice it will be sorted in the opposite order.

Examine a single row

Every row in a tabular report has a radio button to its left:
You can click one of these radio buttons to select a row to drill down into. Note that only one row can be selected. To examine the data contributing to that rows figures, select the type of sub-report you’d like to open from the drop down list at the bottom of the report and click on “Filter…”:
Thus if you are looking at a report of source applications, you can select an application and view a report of source addresses using that application.
27
Loading...
+ 61 hidden pages
Buy Points How it Works FAQ Contact Us Questions and Suggestions Privacy Policy Cookie Policy Terms of Use