Site24x7 NetFlow Analyzer | Monitor Network Traffic

Prerequisites

• To perform network traffic analysis using Site24x7, you must install an On-Premise Poller (version: 4.6.0 or above) in the network being monitored.
• The devices should be able to export flows to Site24x7. Learn how to configure your network devices to export flows to Site24x7 On-Premise Poller.

System Requirements

Explore the system requirements for installing the On-Premise Poller to monitor your network traffic.

How it Works

You have to install an On-Premise Poller and configure your devices to export flows to it. Once the On-Premise Poller receives the flows, the list of all devices that export flows to Site24x7 will be displayed, from which you can pick the desired devices and interfaces and add them for analysis.

Site24x7 analyzes the traffic and bandwidth at the device, interface, application, and conversation level and provides you with different performance metrics that you can correlate to obtain insights. With numerous graphs and reports as well as the custom dashboard, Site24x7 simplifies your usage and performance monitoring.

Supported Flows

NetFlow | J-Flow | sFlow | IPFIX | NetStream | AppFlow | CFlow

Configuring Flow Exports

To analyze network traffic using Site24x7, you must configure your network devices to export flows to the On-Premise Poller. Once the device starts exporting flow data, you can view the traffic data on the Site24x7 web console.

Adding a Device to Monitor Network Flows

Export your network traffic to Site24x7 to monitor the traffic flows and bandwidth performance in real time. You can set up a device to export flows for network traffic analysis by following the five steps below:

1. Choose an On-Premise Poller.
2. Export commands to configure flow exports. You can do this manually or automatically by providing your network credentials.
3. Choose devices and interfaces.
4. Organize your monitors and configure profiles.
5. Verify your entries and export flows for monitoring.

NetFlow Templates

Site24x7 provides a list of predefined templates that contain preconfigured values. The different types of templates are:

• Application templates: These templates are matched with the applications, protocols and ports and are associated with the template for simplified analysis.
• DSCP templates: Differentiated Services Code Point (DSCP) is a way of classifying and managing network traffic to obtain the quality of service stats on modern networks.

You can use the generic templates or create custom templates.

Performance Metrics Monitored

Network Traffic Monitoring works by analyzing the traffic performance at different levels:

Device metrics | Interface metrics | Application metrics | Conversation metrics | QoS

Threshold and Availability Profile

Configure threshold limits for different performance metrics, so that you can receive alerts and take necessary actions when they are breached. You can also do this at the child-level for interface metrics.

Health Dashboard

Obtain a complete picture of the top devices and interfaces that generate maximum traffic and use the network bandwidth using the NetFlow Health Dashboard. This will give you a thorough understanding of the traffic pattern in your network and the interfaces that carry maximum traffic.