sFlowTrend-Pro

Table of Contents

1. Introduction

1.1. Introducing sFlowTrend-Pro

1.2. About sFlow

1.3. Getting started

1.4. Navigating around sFlowTrend-Pro using the history navigator

1.4.1. Bookmarking a tab and its settings

1.4.2. Organising bookmarks

1.4.3. Going to a previously bookmarked tab

1.5. Getting help

1.5.1. Using the on-line help window

2. The dashboard

2.1. Status

2.2. Thresholds

2.3. Top interfaces

3. Charts

3.1. Selecting the switch and interface to analyse

3.2. Chart types

3.2.1. Interface counter charts

3.2.1.1. Using the legend to view one interface counter statistic

3.2.2. Top N traffic charts

3.2.2.1. Understanding the Top N traffic chart

3.2.2.2. Displaying end host information

3.2.2.3. Using the legend to drilldown on specific traffic

3.2.2.4. Filtering for specific traffic

3.3. Changing the time selection

3.3.1. Using the Time selector

3.3.2. Using custom time selection

3.3.3. Making a time selection by dragging the mouse

4. Wireless

4.1. Selecting the WAP and radio to analyse

4.2. Wireless chart types

4.2.1. Wireless specific counters charts

4.2.2. Wireless specific top N traffic charts

5. Switch interface statistics

5.1. Selecting the switch to analyse

6. Using and configuring thresholds

6.1. Viewing thresholds

6.2. Threshold values and types

6.3. Defining thresholds

6.4. Root cause analysis

7. Events

8. Circles

8.1. Selecting the switch and interface to analyse

8.2. Configuring the Circles chart

8.2.1. Clustering end hosts

8.2.2. Automatically labelling chart elements

8.2.3. Selecting traffic volume units

8.3. Changing the time selection

8.4. Interacting with the Circles chart

8.4.1. Selectively labelling chart elements

8.4.2. Displaying end host information

8.4.3. Pan and zoom

8.4.4. Filtering for specific traffic

9. Host statistics

9.1. Comparing host performance

9.2. Trending host performance

9.2.1. Changing the time selection

10. Reports

10.1. Organising report definitions

10.2. Editing report definitions and sections

10.2.1. Viewing report results

10.2.2. Editing a query section

10.2.2.1. Defining how query results are displayed

10.2.2.2. Editing a query using basic settings

10.2.2.3. Editing a query using advanced settings

10.2.2.4. Editing a query using scripted settings

10.2.3. Editing an HTML section

10.3. Running a report

11. Advanced filtering

11.1. Advanced use of filters

11.2. Terms available for use in filters

12. End host information

13. Running sFlowTrend-Pro as a service

13.1. Introduction

13.2. Installation

13.2.1. Using the interactive installer

13.2.2. Installing with a Debian or RPM package

13.2.3. Notes on installing sFlowTrend-Pro as a service under Linux

13.3. Connecting to a server

14. Configuration

14.1. Configuring the license

14.2. Configuring agents in sFlowTrend-Pro

14.2.1. Adding a switch that is to be configured via SNMP

14.2.2. Importing and exporting agent configuration

14.2.3. Verifying the switch configuration and status

14.3. Configuring subnets in sFlowTrend-Pro

14.4. Configuring action on events in sFlowTrend-Pro

14.5. Options

14.5.1. Setting the switch, interface, and host naming policy

14.5.1.1. Setting the switch naming policy

14.5.1.2. Setting the interface naming policy

14.5.1.3. Setting the host naming policy

14.5.2. Configuring global SNMP settings

14.5.3. Configuring advanced options

14.5.4. Proxy configuration

14.5.5. Email

14.5.6. Advanced sFlow

14.6. Configuring user authentication

14.6.1. Adding a user

15. Troubleshooting and frequently asked questions

15.1. Troubleshooting sFlowTrend-Pro

15.1.1. Installation problems

15.1.1.1. When I try to install sFlowTrend-Pro, my browser asks me what to do

15.1.1.2. When I try to install sFlowTrend-Pro, my browser displays a page of text instead of installing the program

15.1.1.3. sFlowTrend-Pro requires the Java Run-time Environment (JRE) v6.0, and Java Web Start

15.1.1.4. Java Web Start is not working correctly on Linux

15.1.2. No switches are listed in the Switch selector

15.1.3. When I select a switch in the Charts tab, the chart is blank

15.1.4. When I select a switch in the Interfaces tab, the table is empty

15.1.5. When I select a switch in the Interfaces tab, the table rows have no counter values.

15.1.6. sFlowTrend-Pro is not receiving sFlow from a switch or host

15.1.7. sFlowTrend-Pro cannot communicate with the switch using SNMP

15.2. Frequently asked questions

15.2.1. After I select a switch to monitor, why does nothing happen?

15.2.2. When I start sFlowTrend-Pro, why do I get an error message "Cannot open UDP port 6343"?

15.2.3. Why are most of the bars in a Top N traffic chart coloured grey?

15.2.4. What firewall requirements does sFlowTrend-Pro have?

15.2.5. How do I change the time for which sFlowTrend-Pro stores data?

16. Advanced topics

16.1. Custom configuration

16.1.1. Client custom configuration settings

16.1.2. Server custom configuration settings

16.2. Customising protocol names

16.3. Integrating sFlowTrend-Pro with other applications

16.3.1. How integration works

16.3.2. Default URLs available

16.3.3. Creating custom URLs

16.3.3.1. Custom URL example

17. Reference

17.1. Menu reference

17.2. Database fields reference

17.2.1. Flows table fields

17.2.2. Counters table fields

17.2.3. Host counters table fields

17.2.4. Time fields

17.3. Filter functions reference

17.4. Database functions

17.4.1. Labels in database functions

17.4.2. Key functions

17.4.2.1. countryCode

17.4.2.2. countryName

17.4.2.3. hostname

17.4.2.4. ifAlias

17.4.2.5. ifName

17.4.2.6. locate

17.4.2.7. locateSwitch

17.4.2.8. mac

17.4.2.9. parent

17.4.2.10. resolve

17.4.2.11. subnet

17.4.2.12. uuid

17.4.2.13. vendor

17.4.2.14. wifiCipherSuiteFormatted

17.4.2.15. wifiCipherSuiteName

17.4.2.16. wifiVersionName

17.4.3. Value functions

17.4.3.1. count

17.4.3.2. max

17.4.3.3. min

17.4.3.4. rate

17.4.3.5. scale

17.4.4. Time functions

17.4.4.1. format

17.4.4.2. timestamp

17.5. Classes and objects defined within scripted reports

17.5.1. Objects defined

17.5.1.1. report

17.5.1.2. reportVars

17.5.2. Classes defined

17.5.2.1. Chart

17.5.2.2. Query

17.5.2.3. Report

17.5.2.4. Table

A. Configuring switches to send sFlow

A.1. Using SNMP to configure the switch to send sFlow

A.1.1. Configuring ProCurve switches to allow sFlow configuration via SNMP

A.2. Using the switch CLI to configure sFlow

A.2.1. Alcatel-Lucent OmniSwitch

A.2.2. Brocade (Foundry Networks)

A.2.3. D-Link

A.2.4. Enterasys

A.2.5. Extreme Networks

A.2.6. Force10 Networks

A.2.7. H3C

A.2.8. Juniper Networks

A.2.9. Netgear

A.2.10. ProCurve Networking by HP

B. Configuring hosts to send sFlow

B.1. Installing the host sFlow agent

B.2. Configuring the host sFlow agent

B.2.1. Linux configuration using DNS Service Discovery

B.2.2. Linux configuration using the configuration file

C. Recommended sampling rates

D. Acknowledgements and copyright