Please follow these steps to start monitoring your network traffic with sFlowTrend-Pro. It will also be useful to have the documentation available for your network switches.
Ensure that you have some switches or hosts that support sFlow. sFlowTrend-Pro can only monitor switches or hosts using sFlow.
If you are using the application version of sFlowTrend-Pro, then just run it from the Start menu, as with any other application.
If you are running sFlowTrend-Pro as a service, then the service should be started automatically after each reboot. To connect to the service to use the product, start the sFlowTrend-Pro client, using the Start menu. Two options are available: to connect to the server running on the local system, use the sFlowTrend-Pro local client menu item; to connect to a different remote server running the sFlowTrend-Pro service, use the sFlowTrend-Pro remote client menu item.
If you are running sFlowTrend-Pro as a service, then the license should be configured to allow sFlow to be collected. Refer to Section 13.1, “Configuring the license ” for information on how to set the license.
Select the sFlowTrend-Pro Advanced sFlow tab. Note the sFlow collector address and UDP port that sFlowTrend-Pro is using to receive sFlow. If your host has multiple IP addresses, they will be accessible through the sFlow collector address selector. Select the most appropriate IP address for sFlowTrend-Pro to use to receive sFlow.→ (or, on an Apple Macintosh, → ) menu item and select the
Make sure that any host based firewalls, or external firewalls between the host running sFlowTrend-Pro and the switches being monitored allow:
Select the SNMP tab. Choose whether sFlowTrend-Pro should use SNMP v2c or SNMP v3 by default when communicating with the switches, and enter the appropriate settings for your network. In addition to these global settings, the SNMP settings can also be overridden per switch (see Section 13.2, “Configuring agents in sFlowTrend-Pro ”). Note that the SNMP settings must allow write access if your switches are to be configured using SNMP (see below). If the switches are configured manually, then settings that allow read access can be used.→ (or, on an Apple Macintosh, → ) menu item and select the
Next, sFlow should be enabled on the switches you wish to monitor. How this is done depends on the make and model of each switch. Some switches support sFlow configuration through SNMP, while others require that it is manually configured through the configuration interface for the switch (normally the web interface or command line interface (CLI)). In some cases, the switch can be configured either way. SNMP configuration is normally the easiest. Consult the switch vendor's documentation to determine how sFlow can be configured, and for any specific instructions. See Appendix A, Configuring switches to send sFlow for additional information on configuring switches.
To manually configure a switch to send sFlow, consult the switch documentation to determine the specific steps required. Normally, this is done through the web interface or the command line interface on the switch. Connect to the switch (say using a web browser, ssh or telnet). Follow the instructions for the switch to configure it to send sFlow to the IP address and UDP port that sFlowTrend-Pro is using to receive sFlow. You will also need to enable sFlow on one or more interfaces on the switch and set a sampling rate.
As soon as sFlow reaches sFlowTrend-Pro, the switch will automatically be added to sFlowTrend-Pro. Even though the switch is not configured through SNMP, configuring sFlowTrend-Pro with SNMP settings that allow read access to the switch will allow information about the switch to be displayed in a more useful way. For example the interfaces can be displayed by name, rather than number. See Section 13.2, “Configuring agents in sFlowTrend-Pro ” for more information on this topic.
If you have any hosts that support sFlow, or you are installing the host sFlow agent, then enable these to send sFlow to sFlowTrend-Pro. See Appendix B, Configuring hosts to send sFlow for more information on configuring host sFlow.
When sFlowTrend-Pro starts to receive sFlow, the green 'LED' at the bottom right of the window should start flashing. This flashes for each sFlow sample received, so the more sFlow being received, the faster it will flash. Also, on the Dashboard tab, Status section, you can see the incoming sample rate.
Now that your switches are configured to send sFlow, they should be visible within sFlowTrend-Pro. In the Dashboard tab, the status bar will indicate how many switches are being monitored. The Dashboard tab highlights the busiest switch interfaces. See Chapter 2, The dashboard.
Go to the Nework tab, select the Flows sub-tab, and then use the Switch selector to view the traffic information for a specific switch. The default view shows top sources across all interfaces on the switch. You can change the chart displayed using the Chart selector, and view data for a specific interface using the Interface selector. See Section 3.3, “Top N” for more information on network traffic flows charts.
To find quickly the interfaces on a switch that are busiest, select the Interfaces sub-tab. This will show a table of all the interfaces on the selected switch. By clicking on the column headings, you can sort by Utilization, Unicasts per second, etc. Once you have found an interface of interest, click the button, at the left-hand end of each row, to go directly to the charts for that interface. See Section 3.1, “Interfaces” for more information on this tab.