Need instruction "How to use Flowalyzer NetFlow & SFlow

Scrutinizer is an enterprise/business class NetFlow and sFlow analysis tool. Scrutinizer provides historical trends of the company's critical network interfaces as well as the details on:

Who: The end system causing the traffic
What: The application/protocol that is being used
When: The time frame it has been occurring for
Where: The network connection that is affected

Moderators: scottr, Moderator Team

Post Reply
vt399
Posts: 3
Joined: Mon May 12, 2014 5:59 pm

Need instruction "How to use Flowalyzer NetFlow & SFlow

Post by vt399 » Mon May 12, 2014 6:17 pm

Hi everybody,

I just download a FREE "Flowalyzer NetFlow" to use with Cisco ASA 5550 Ver 9.1(3).
There is an instruction on support show "How to set up on Cisco ASA" and I did.
But I could not find any instruction show "How to set up and use Flowalyzer".
I just want to detect which device send the hightest volune.
Please, help.
Thanks.

seanh
Posts: 20
Joined: Thu Oct 17, 2013 8:50 am
Location: Kennebunk, ME

Re: Need instruction "How to use Flowalyzer NetFlow & SFlow

Post by seanh » Tue May 13, 2014 8:30 am

Hello vt399,

If you just have “Flowalyzer” installed you can open the executable up and press the “Listener” tab. This will list out “listening ports” – make sure the ASA is sending flows on one of these. Press start and you will see the exporter IP, host name, port the flow is sending on, type of NetFlow, and the NetFlow packet count.

As a side note - if you have Scrutinizer installed as well, you will want to shut down the collector from the services to do this.

If you have Scrutinizer installed on the server, you can get a “flows per second” count per NetFlow sending device with the vitals reports. This may be more helpful to what you are looking for. Scrutinizer has a free 30 day trial and free mode.

Thanks,
Sean

vt399
Posts: 3
Joined: Mon May 12, 2014 5:59 pm

Re: Need instruction "How to use Flowalyzer NetFlow & SFlow

Post by vt399 » Wed May 14, 2014 4:47 pm

Thanks seanh for fast reply.

I configured ASA 5550 "flow-export destination inside 10.1.114.19 4444". On Flowalyzer the default listening ports: 2055,4739,9996,6343,9001. Press start, waiting and nothing happen.
Changed the "Listening ports" to 4444 only but same problem. Not sure why the Flowalyzer was not working. Please, advice.
Thanks.

vt399
Posts: 3
Joined: Mon May 12, 2014 5:59 pm

Re: Need instruction "How to use Flowalyzer NetFlow & SFlow

Post by vt399 » Wed May 14, 2014 5:26 pm

Thanks seanh for fast reply.

I configured the ASA 5550 “flow-export destination inside 10.1.114.19 4444” and “flow-export event-type all destination 10.1.114.19”
Open “Flowalyzer”, press the “Listener” tab. This will list out “listening ports”, added 4444. Press start, waiting and nothing happens.
Please, advice.
Thanks

joshb
Posts: 3
Joined: Wed Apr 02, 2014 1:11 pm

Re: Need instruction "How to use Flowalyzer NetFlow & SFlow

Post by joshb » Thu May 15, 2014 8:52 am

hello vt399,

I would make sure you don't have any firewalls or anti-virus blocking that port.

thanks,
Josh

Post Reply

Who is online

Users browsing this forum: No registered users and 2 guests