Corona Technical Services

SolarWinds Orion® – Modular Training Manual NetFlow Traffic Analyzer v3 Brett D. Organ

13 SolarWinds Orion® – Modular Training Manual: NetFlow Traffic Analyzer v3 © Copyrights incl. manuals & revisions 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011. 2012 Corona Technical Services, L.L.C. All rights reserved, including the right of reproduction in whole or in part in any form.

-1-

Table of Contents Introduction to NetFlow Traffic Analyzer ................................................................................3 Installation ..........................................................................................................................11 Configuration and Data Maintenance ...................................................................................20 NetFlow Data in the Orion Web Console...............................................................................41 Creating NetFlow Reports ....................................................................................................55 Appendix - Labs ...................................................................................................................61

SolarWinds Orion® – Modular Training Manual: NetFlow Traffic Analyzer v3 © Copyrights incl. manuals & revisions 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011. 2012 Corona Technical Services, L.L.C. All rights reserved, including the right of reproduction in whole or in part in any form.

-2-

Introduction to NetFlow Traffic Analyzer Introduction to NetFlow Traffic Analyzer ................................................................................3 Why Install NetFlow Traffic Analyzer .......................................................................................... 4 Why Use Orion NetFlow Traffic Analyzer.................................................................................... 5 How Orion NetFlow Traffic Analyzer Works................................................................................ 5 NetFlow – the Basics ................................................................................................................... 6 Notes ........................................................................................................................................... 9 Discussion Questions................................................................................................................. 10

SolarWinds Orion® – Modular Training Manual: NetFlow Traffic Analyzer v3 Introduction to NetFlow Traffic Analyzer © Copyrights incl. manuals & revisions 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012 Corona Technical Services, L.L.C. All rights reserved, including the right of reproduction in whole or in part in any form.

-3-

Installation Installation ..........................................................................................................................11 Purpose of Module Two ............................................................................................................ 12 Licensing Orion NetFlow Traffic Analyzer.................................................................................. 12 Hardware Requirements ........................................................................................................... 12 Enabling NetFlow on Cisco Hardware ....................................................................................... 14 Manual Configuration Example............................................................................................. 14 Extreme sFlow Configuration ................................................................................................ 15 HP sFlow Configuration ......................................................................................................... 15 Installing Orion NetFlow Traffic Analyzer.................................................................................. 16 Notes ......................................................................................................................................... 18 Discussion Questions................................................................................................................. 19

SolarWinds Orion® – Modular Training Manual: NetFlow Traffic Analyzer v3 Installation © Copyrights incl. manuals & revisions 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011. 2012 Corona Technical Services, L.L.C. All rights reserved, including the right of reproduction in whole or in part in any form.

- 11 -

Configuration and Data Maintenance Configuration and Data Maintenance ...................................................................................20 Getting Started .......................................................................................................................... 21 Adding NetFlow-enabled Devices and Interfaces ................................................................. 21 Adding NetFlow Sources to NetFlow Traffic Analyzer............................................................... 22 Enabling the NetFlow Traffic Analysis Summary View.............................................................. 24 Optimizing NetFlow Data Collection and Maintenance ............................................................ 25 Database Settings .................................................................................................................. 25 How NTA Manages Collected Data........................................................................................ 27 NetFlow Management........................................................................................................... 27 DNS and NetBIOS Resolution................................................................................................. 28 IP Address Processing............................................................................................................ 29 Top Talker Optimization ........................................................................................................ 29 Configuring Monitored Ports and Applications......................................................................... 30 Selecting IP Address Groups for Monitoring ............................................................................. 33 Configuring Protocol Monitoring .............................................................................................. 35 Configuring NetFlow Types of Services ..................................................................................... 36 Configuring NetFlow Collector Services .................................................................................... 37 Notes ......................................................................................................................................... 39 Discussion Questions................................................................................................................. 40

SolarWinds Orion® – Modular Training Manual: NetFlow Traffic Analyzer v3 Configuration and Data Maintenance © Copyrights incl. manuals & revisions 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012 Corona Technical Services, L.L.C. All rights reserved, including the right of reproduction in whole or in part in any form.

- 20 -

NetFlow Data in the Orion Web Console NetFlow Data in the Orion Web Console...............................................................................41 NetFlow Views Available on the SolarWinds Web Console ...................................................... 42 Customizing Charts in NetFlow Traffic Analyzer ....................................................................... 43 Edit Resource Page ................................................................................................................ 43 Customize Chart Page............................................................................................................ 44 Chart Titles............................................................................................................................. 44 Time Periods.......................................................................................................................... 44 Adjust Sample Interval .......................................................................................................... 44 Chart Size............................................................................................................................... 45 Data Tables ............................................................................................................................ 45 Font Size ................................................................................................................................ 45 Printing Options..................................................................................................................... 45 Data Export Options .............................................................................................................. 45 Enabling Progressive Charting................................................................................................... 46 Classic vs Interactive Charts ...................................................................................................... 47 Using Endpoint Centric Resources ............................................................................................ 49 Using the Flow Navigator .......................................................................................................... 50 Notes ......................................................................................................................................... 53 Discussion Questions................................................................................................................. 54

SolarWinds Orion® – Modular Training Manual: NetFlow Traffic Analyzer v3 NetFlow Data in the Orion Web Console © Copyrights incl. manuals & revisions 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012 Corona Technical Services, L.L.C. All rights reserved, including the right of reproduction in whole or in part in any form.

- 41 -

Creating NetFlow Reports Creating NetFlow Reports ....................................................................................................55 NetFlow Reports........................................................................................................................ 56 NetFlow Reports in Report Writer ............................................................................................ 56 Creating a Custom Report using Report Writer ........................................................................ 56 Notes ......................................................................................................................................... 59 Discussion Questions................................................................................................................. 60

SolarWinds Orion® – Modular Training Manual: NetFlow Traffic Analyzer v3 Creating NetFlow Reports © Copyrights incl. manuals & revisions 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012 Corona Technical Services, L.L.C. All rights reserved, including the right of reproduction in whole or in part in any form.

- 55 -

Appendix - Labs Appendix - Labs ...................................................................................................................61 Configuring NetFlow Settings.................................................................................................... 62 NetFlow Web Views .................................................................................................................. 64 NetFlow Reports Lab ................................................................................................................. 65

SolarWinds Orion® – Modular Training Manual: NetFlow Traffic Analyzer v3 Appendix - Labs © Copyrights incl. manuals & revisions 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012 Corona Technical Services, L.L.C. All rights reserved, including the right of reproduction in whole or in part in any form.

- 61 -