Bandwidth reporting, capacity planning, and traffic shaping: NetFlow Analyzer Training
Download as PPTX, PDF0 likes500 views
The document provides an overview of NetFlow Analyzer's capabilities for diagnosing and troubleshooting network traffic issues. It discusses how to customize data storage and dashboards to monitor traffic in real-time. Reporting and automation features allow generating historical reports to identify bandwidth capacity issues. Forensic analysis with raw data helps pinpoint the root cause of traffic spikes by filtering traffic by application, user, or other criteria. An example troubleshooting scenario demonstrates how NetFlow Analyzer could be used to identify and resolve a network congestion issue caused by a patch upgrade affecting many servers during business hours. The document also covers capacity planning, billing, and bandwidth optimization techniques.
Bandwidth reporting, capacity planning, and traffic shaping: NetFlow Analyzer Training
- 1. Free training on NetFlow Analyzer - Part II Diagnosing and troubleshooting traffic issues faster
- 3. Agenda âą Customizing data storage âą Customizing dashboards âą Reporting and automation âą Troubleshooting with forensics âą Traffic shaping âą Capacity planning and billing
- 5. How long data is stored for troubleshooting
- 6. Customizing storage settings Aggregated dataRaw data One-minute data
- 7. Aggregated data Default ON Raw data Default OFF Types of data storage âą Each and every detail on application, source, destination, and more âą Storage time limit (one hour to one month) âą By default one day is selected âą Improve raw storage up to one year with High Perf âą Troubleshoot faster with forensics âą Stores "top 100" records for conversation by default (Up to 300 records) âą Retains data forever by default âą Historical reporting
- 8. Benefit of turning on raw data âą One-minute granularity for the most detailed traffic analysis âą Long-term storage for better root cause analysis âą Improves accuracy with each and every conversation detail âą Deeper insights for troubleshooting with forensics reports âą Real-time alerts to troubleshoot issues immediately http://blogs.manageengine.com/product-blog/netflowanalyzer/2010/01/29/data-storage-pattern-in-netflow-analyzer.html
- 10. One-minute traffic data âą Interface traffic graph for any 24-hour period âą Capacity planning traffic report âą Compare report Raw data âą Forensics âą Last 2 hour for interface snapshot graphs âą Traffic details for App flow, Medianet, Multicast, AVC and ASA flow. Aggregated data âą All widgets in inventory (Application, conversation and QoS) âą All interfaces and graphs, except a traffic graph for any 24-hour period âą Search and custom search report âą Consolidated report âą Schedule report âą Report profile Data storage summary
- 11. How to identify potential issues early
- 12. Traffic summary dashboards Top N applicationsDevice summary Top N protocols Top N QoS Top N conversations
- 13. View top N traffic details from the dashboard âą Track top N details in traffic summary âą Drill down to the most consumed traffic; identify suspicious traffic âą Create new dashboards to view the details that are important to you âą Display live data in your NOC screen with auto-refresh option
- 14. Proactive alerting Link congestionUtilization % exceeds High traffic volume Link speed is low
- 15. Set alarms based on bandwidth usage âą Difference between alarms and events Alarms display: âą Message âą Source âą Category âą Technician âą Notes âą Severity âą Date/time
- 16. Possible options with alarms âą Drill down to faulty router/interface from the alarm âą Note the exact time an issue occurred âą Check for traffic/application graphs âą Add notes to update the status of an alarm âą Discuss issues with team members An alarm is raised when WAN link utilization is more than 50%
- 17. How to find the root cause of an issue
- 18. Easy reporting CompareCustom search Consolidated IP group and protocol Forensics
- 19. Drill down to any specific detail with reports Search/custom search report Compare report Consolidated report IP group consolidated report Protocol distribution report Bandwidth analysis reports help you: Search specific traffic details by the associated application, protocol, host, or IP Compare bandwidth usage at different time intervals Track top talkers and conversations with a complete report Visualize the combined bandwidth usage of all IP groups View protocol-based traffic for any particular interface
- 20. Save all your reports in Report Profiles
- 21. Benefits of reporting âą Create criteria-based reports to identify bandwidth shortages or traffic spikes âą Automate and schedule reports at any specific time; receive notifications about reports âą Save reports and export them to PDF or CSV files to share them with upper management âą Generate historical reports to promptly diagnose bandwidth capacity âą Periodically review and optimize the usage of network bandwidth
- 22. Troubleshooting with forensics What's the root cause of a traffic spike?
- 23. Benefits of forensics âą Get more granular traffic statistics using raw data âą Drill down to identify which users, applications, and protocols are consuming the most bandwidth at a specific time âą Troubleshoot accurately by defining multiple criteria to filter required traffic âą Flexibility to review historical data and find out why a particular spike was generated
- 25. There was major network congestion and critical applications were running slowly...
- 26. WAN Congestion
- 27. ...which affected all users connected to the network. The biggest challenge was figuring out how to quickly resolve the issue. Step 1: Determine which part of the network was experiencing congestion Step 2: Identify what caused the congestion. App or user or external attack? Step 3: Troubleshoot by applying policies and bring the network back up
- 28. Step 1: Determine which part of the network was experiencing congestion âą Where is the congestion and is it notified to me? âą Which applications were contributing to the most traffic? âą What QoS precedence value was the traffic utilizing at the time? âą What were the top source, destination & conversations in the network? The dashboard immediately provided details on what was being affected.
- 29. Step 2: Use forensics to identify what caused the congestion âą Which applications or users were consuming the most traffic? âą What was the top conversation in the network at that time? Forensics help locate the real cause. The issue was with a patch management upgrade that happened on all windows server during business hours.
- 30. 1. Block the IP using an access control list (ACL) 2. Reduce the traffic bandwidth utilization 3. Load share the traffic with the help of Compare Reports 4. Reschedule the action to occur during non-business hours How to troubleshoot and fix the issue
- 31. 1. Filter out excess router traffic by blocking IP/ IP network 2. Allow certain packets and deny everything else #1. Block the IP with an ACL
- 32. 1. Tweak your traffic policies with CBQoS configurations 2. Shape interface traffic and prioritize your critical applications 3. Monitor the policy change in CBQoS graphs #2. Reduce the bandwidth utilization
- 33. 1. Compare multiple devices across the same time period to view each one's capacity 2. Decide how much to deviate traffic on each interface/device #3 and #4: Load share the traffic or rescheduling using Compare Reports
- 34. Once the issue is resolved, generate a consolidated report to view the traffic stats.
- 35. What should you do if your bandwidth is slowly reaching its limit?
- 36. Capacity planning Know immediately when you've reached your maximum capacity. Generate short-term or long-term reports to view your network's usage trends. Get meaningful insight into application growth, average usage, and any usage deviations.
- 37. How to bill your customers correctly
- 38. Billing Measure bandwidth usage to verify your ISP billing. Generate bill plans for your customers/clients if you're an ISP.
- 39. How to optimize your current bandwidth?
- 40. 2. Understand historic trends and shape non-business traffic. 3. Prioritize critical applications. 1. Segment the network by creating groups. Bandwidth optimization techniques
- 41. iPhone app
- 43. Summary
- 44. Need more help? youtube.com/opmanagertechvideos help.netflowanalyzer.com forums.manageengine.com/netflowanalyzer netflowanalyzer-support@manageengine.com +1 (888) 720-9500 / +1 (408) 916 - 9595
- 45. Q&A