All rights reserved. All product names are trademarks of their respective companies. User’s Guide – version 3.5 NetFlow Tracker Contents SOFTWARE LICENSE AGREEMENT 5 INTRODUCTION 15 What is NetFlow? 15 What is NetFlow Tracker? 15 Features and Benefits 15 INSTALLATION 17 Minimum System Requirements 17 Operating System Support 17 Pre-installation Checks 17 Installation on Microsoft Windows 18 Installation on Linux 19 Post-installation Tasks 19 USING NETFLOW TRACKER 21 Real-time Data 21 Long-term Data 21 Executive Reports 21 Network Overview 21 Devices 21 Per-AS data 23 Working with Charts 23 Working with Pie Charts 26 Working with Tabular Reports 26 Report Templates 28 Creating Filtered Reports 30 User’s Guide – version 3.5 NetFlow Tracker LONG-TERM REPORTS 35 Devices and Interfaces 35 Per-device and Per-interface Long-term Reports 35 Filter Editor 35 REPORTS 37 REPORT URL FORMAT 38 General Form 38 Report Format Parameters 38 Time Range Parameters 42 Filter Parameters 49 Security Parameters 54 Management Portal Access Control Parameters 55 PERFORMANCE TUNING 58 Disk Speed 58 Query Size 58 Database Server Settings 58 CONFIGURATION GUIDE 59 Licensing 59 Listener Ports 59 SNMP Settings 59 Device Settings 60 Security Settings 62 Management Portal Settings 63 Using Apache as a Portal Server 64 Report Settings 65 An Example Executive Report – Top Applications Today and This Week 70 User’s Guide – version 3.5 NetFlow Tracker IP Application Names 72 DiffServ Names 72 Hostname Resolution Settings 72 AS Names 73 Subnet Names 73 Database Settings 73 Backup 74 Archiving 75 Memory Settings 75 Performance Counters 75 About 77 APPENDIX 1: DEVICE CONFIGURATION 78 Enabling NetFlow Export/NDE on a Cisco Router or Layer 3 Switch 78 Configuring NetFlow Input Filters for Traffic Class Reporting 83 Enabling Flow Detail Records on a Packeteer Device 83 Enabling NetFlow on an Enterasys Device 84 APPENDIX 2: CSV FILE FORMAT 85 Chart CSV format 85 Pie chart CSV format 85 Tabular report CSV format 85 APPENDIX 3: XML FORMAT 86 Chart XML format 86 Pie chart XML format 86 Tabular report XML format 86 APPENDIX 4: THIRD PARTY SOFTWARE COMPONENTS 87 User’s Guide – version 3.5 NetFlow Tracker Software License Agreement This is a legal agreement between you (“You”/ “the End User””), and Fluke Corporation, a Washington corporation, its subsidiaries and affiliates, including Fluke Networks (“Fluke”), with offices at 6920 Seaway Boulevard, Everett, Washington, 98203, USA. BY DOWNLOADING OR OTHERWISE ELECTRONICALLY RECEIVING THIS SOFTWARE PRODUCT (“PRODUCT”) IN ACCORDANCE WITH OUR SOFTWARE DELIVERY PROCEDURES OR BY OPENING THE SEALED DISK PACKAGE WHICH CONTAINS THE PRODUCT, YOU ARE AGREEING TO BE BOUND BY THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO THE TERMS OF THIS AGREEMENT, PROMPTLY DELETE THE DOWNLOADED OR ELECTRONICALLY RECEIVED SOFTWARE FROM YOUR COMPUTER SYSTEM AND NOTIFY US OF SAME IN ORDER TO CLAIM AND, IF YOU HAVE RECEIVED A SEALED CD-ROM PACKAGE, RETURN THE UNOPENED DISK PACKAGE AND THE ACCOMPANYING ITEMS (INCLUDING MANUALS) TO A FLUKE REPRESENTATIVE, FOR REFUND OF THE PRICE PAID. 1. GRANT OF LICENCE AND PAYMENT OF FEES Provided that You have paid the applicable licence fee, Fluke grants You a non-exclusive and nontransferable, revocable licence to use one copy of the Product on the maximum number of servers and the maximum number of devices specified in your purchase order, or if not so specified, on a single server and a single device by a single user, and only for the purpose of carrying out your business in the country specified in your order. This Product is licensed for internal use by You, the end user only. The Product is not licensed for provision of a public service by You or for the provision of any fee generating service by You to a third party. In the event that at any time You wish to extend the permitted number of servers or devices above the permitted amount, You must contact Fluke or the reseller from whom you purchased the Product (“the Reseller”) and an additional licence fee may be agreed and a new licence issued for the requested additional number of servers/devices. Fluke or your Reseller may require that You provide written certification showing the geographical locations, type and serial number of all computer hardware on which the Software is being used, together with confirmation that the Product is being used in accordance with the conditions of this Agreement. You shall permit Fluke or your Reseller, and/or their respective agents to inspect and have access to any premises, and to the computer equipment located there, at or on which the Software is being kept or used, and any records kept pursuant to this Agreement, for the purposes of ensuring that the Customer is complying with the terms of this licence, provided that Fluke/your Reseller provides reasonable advance notice to the Customer of such inspections, which shall take place at reasonable times. 2. EVALUATION, UPDATES, UPGRADES AND SUPPORT AND...