N e t F l o w Tr a c k e r

Real-time monitoring of Netflow and IPFIX data providing network

managers detailed traffic information.
NetFlow Tracker harnesses flow information LAN and data center and MPLS based WAN
NetFlow Tracker provides information on from Cisco IOS NetFlow, and flow standards infrastructures, while content change is to
all network conversations passing through from several other vendors, to give users latency sensitive traffic such as voice and
detailed network traffic insight without the video coupled. This is all coupled with the
the interfaces of supported routers and
use of probes or appliances. Finally, many exponential growth of malicious virus and
switches, regardless of network design.
critical management questions about the hacking attacks as well as peer-to-peer and
NetFlow Tracker can generate unique network become easy to answer: file sharing data. NetFlow Tracker makes flow
databases that collect, store, and present • Exactly what makes up my network data accessible to a wide range of technical
valuable usage-based network data traffic? and non-technical audiences and integrates
reports. This reporting and storage • Who are the users? with any existing application that can call
capability allow data to be stored for up • What applications are they using? a URL.
NetFlow Tracker can archive aged
to 999 years in 1 minute granularity. • Who and what are consuming the
real-time data. This data can then be off-
bandwidth?
loaded onto another storage medium (e.g.,
• Are there worms and viruses in my
SAN or NAS system). When the information
network, where are they, where
is required again, Tracker simply allows the
did they come from, and where are
user to remount the archived data and (using
they going? the filter editor) report on any of the original
• How is quality of service working? conversations.
• Are network usage policies being
followed? Primary features
• Traffic identification – utilizing
Investigate your network deep packet inspection facilities
As can be seen in Figure 1, left, every single on most Cisco routers or Packeteer
Figure 1 - NetFlow Tracker Flow Storage conversation flow, to the per-minute level,
devices NetFlow Tracker can
up to the last two minutes, on every router,
record and display the “real”
on every interface, right across the customer
traffic information which may be
network, is collected, stored and presented.
embedded or hidden within other
NetFlow Tracker provides complete coverage
application types (e.g., HTTP/Port
leveraging an existing data source already
embedded within the network and usually 80 traffic).

already paid for (Cisco Hardware and Cisco • Executive summaries – customized,
IOS software or other NetFlow and IPFIX multi-item reports that can be
enabled networking devices from world tailored to the intended audience.
leading manufacturers). • Pie and bar charts – rich graphical
Changes in the architecture and content views complementing the more
of today’s network environments mean that granular text based reports,
it is essential to report on every single offering easy navigation and
conversation. The primary architectural more freedom through interactive
change is the continued growth of QoS
context-sensitive menus.
enabled networks – both within the campus

NetFlow Tracker harnesses flow information from Cisco IOS NetFlow.

Technical Data
• Customizable home page –
in conjunction with executive
summaries, each user can be
assigned a default start page with
meaningful specific data relevant
to that person or team.
• Archiving– expired real-time data
can be archived to another storage
system and can be remounted for
reporting purposes.
• Full coverage – every flow record,
per minute, up to the last two
minutes – is captured.
• Safe integration with any third-
party management product, using
Figure 2 - Network overview
secured URLs.
• Layered long-term historical
reports in multiple time frames
and time slices.
• Powerful filters for any
combination of flow record
contents from the long-term or
real-time databases.
• Report relevance to multiple
audiences – for example, real-time
operations compared to capacity
planning or application manager.
• NetFlow Tracker is a software-only
solution that requires no hardware
probes.
• Multicast egress support. Figure 3 - Executive Summary
Executive report of Packeteer with
• IP Port/Application grouping. service and class id.
• MPLS VPN/Vrf aware – saving
considerable administration
Minimum
time for creating reports on Recommended specification
Component specification
dynamic MPLS based network (production environments)
(for trial installations )
infrastructures.
RAM 1024 Mb 4 GB
• Bidirectional reporting showing a
Disks 40 Gb IDE or SATA Multiple SAS (10k+ RPM) or SCSI (15k+ RPM) disks in
complete picture of traffic flows a RAID 5 or RAID 10 (preferred) configuration to suit
in both directions across the required storage volume

network. Processor 1.5 Ghz+ Intel CPU - Dual Core 2.6 GHz +
Operating Windows 2000/ Windows 2003 Server/Linux/Solaris
system Linux/Solaris
Table 1 – More information to help you optimise your NetFlow Tracker installation can be found in the
performance and scalability document downloadable from the NetFlow Tracker product page on our website.
 • NetFlow export versions 1, 5, 7
Executive summaries
and 9 are supported, in addition
NetFlow Tracker provides reporting and
summary information in formats to suit both to the emerging IPFIX standard
business and technical audiences. These are (IP Flow Information eXport).
customizable multi-item reports that provide
Scenarios of use
a higher level view. The reports are based on
The scenarios in Table 2 show a number of
URLs and can be built from any number of
typical report requests and the audiences
report items available elsewhere in the
likely to be associated with them.
application and are interactive.
For example, Figure 2 includes a network
Scenario Example audience
overview showing a pie chart and stacked
Bandwidth usage and real-time visibility Operations
bar graph of top devices over the past 24
hours by packet rate, together with the top Visibility of voice over IP/ quality of service Voice manager

interfaces by utilization and packet rate – all Coverage of conversation awareness, where a link exists between Security
source IP address and source interface
on one page.
Figure 3 shows as a pie chart and a list, Recording of virus and worm historical presence Security/operations
the top applications and traffic classes, this ISP visibility of peer and origin AS traffic ISP/planner
information is exported from Packeteer as Detailed application visibility Application manager
service and class IDs. Capacity planning Capacity planner
Executive reports can be scheduled Secure visibility of usage pattern in a controlled environment End user
for distribution via email or can be made Long-term view for IT and operations management IT management
available as users’ default homepages
Table 2 – Typical report request and audiences
when they log in.
Vendor and technology support
Network device requirements Native support: Cisco, Enterasys, Expand,
• Cisco IOS NetFlow enabled Routers Huawei, Juniper, Nortel, Packeteer, Peribit,
(full range) and LAN switches Riverbed and other NetFlow/IPFIX enabled
(Catalyst 65xx and 45xx may vendors equipment.

require hardware upgrades), Support via flow conversion or flow

creation tools: 3Com, Extreme, Foundry,
Juniper JUNOS cflowd/Jflow
HP and most other leading brands.
enabled routers, Nortel IPFIX
enabled Passport 86xx and 55xx Free trial
series LAN switches. Download a free, no - obligation trial copy
• Any device capable of exporting of NetFlow Tracker for 7 days and discover the
NetFlow or IPFIX. For the software flow information and network traffic insight
to function properly with a device, that help you answer critical management
the exports must contain correct questions about your network. Go to
ifIndex information and have www.flukenetworks.com/netflowtracker

otherwise well-formed NetFlow or for your trial copy.

IPFIX export packets.

N E T W O R K S U P E R V I S I O N
• Any device without inherent Fluke Networks
P.O. Box 777, Everett, WA USA 98206-0777
NetFlow or IPFIX capability may
Fluke Networks operates in more than 50 countries
also be fully supported through worldwide. To find your local office contact details, go to
www.flukenetworks.com/contact.
the use of the nProbe NetFlow
©2007 Fluke Corporation. All rights reserved.
generator. Printed in U.S.A. 4/2007 2826323 D-ENG-N Rev B