background image

Also, this technique creates packets on the fly from NetFlow statistics that can represent very large 
numbers of packets. Because of this, best practices must be used in order for the NetFlow Analyzer to 
scale. At lower volumes the Expert can be used to display conversations. However, at higher volumes the 
Expert diagnoses should be disabled, and at even higher volumes the Expert itself should be disabled, and 
so and so forth. Obviously, the faster your computer, the more volume it will be able to process. 
 

System Requirements 

Hardware: The faster the better, with lots of memory.   OS: Windows XP or Vista 

Summary of Contents for OmniPeek NetFlow Analyzer s

Page 1: ...all it onto a computer that already has OmniPeek Enterprise installed on it Yes the NetFlow Analyzer only works with OmniPeek Enterprise so if you were thinking about an upgrade from Basic or Pro now is definitely the time Configuration as a collector To configure the NetFlow Analyzer as a collector run OmniPeek and select the Monitor Adapter The Monitor can be enabled by selecting Monitor from th...

Page 2: ... select Tile Now adjust the windows you should see something like this And that s it for the monitor you are now all knowing and all powerful But guess what that s just the beginning Multiple NetFlow Capture Windows With the global monitor you can collect NetFlow from one or more Cisco routers on different networks and aggregate the statistics into a single view But let s say that you would like t...

Page 3: ...Analyzer displays the interface for each packet in the packet list and the interface statistics in the Summary Statistics In turn the Interface Statistics can be triggered on and graphed Below are some screenshots of each NetFlow Versions This version of the NetFlow Analyzer supports NetFlow versions 5 9 and templates 256 and 257 If you are using other versions of NetFlow and would like us to add ...

Page 4: ...r to scale At lower volumes the Expert can be used to display conversations However at higher volumes the Expert diagnoses should be disabled and at even higher volumes the Expert itself should be disabled and so and so forth Obviously the faster your computer the more volume it will be able to process System Requirements Hardware The faster the better with lots of memory OS Windows XP or Vista ...

Reviews: