- ICmyNet.Flow Glavni Baner
ICmyNet.Flow is an application for deep network traffic investigation, analysis and reporting. It is based on NetFlow statistics, exported from your routers and switches to ICmyNet.Flow server.
- visualize traffic distribution by subnets, hosts, services and more.
- detects traffic anomaly
- saves your time with troubleshooting and diagnostics
- easier network/application optimization
- improves security
- visualize traffic distribution by subnets, hosts, services and more.
What is an IP flow?
IP flow is an unidirectional stream of IP packets of a certain network protocol, traveling between two network points. IP flow is identified by the source and destination IP address, source and destination port, protocol and DSCP field, within a certain period of time. Within an IP flow all IP packets have identical:
What is IP flow accounting?IP flow accounting is a feature of a router enabling it to create IP flows collection, count IP flows passing through it and to export the statistic via NetFlow® protocol. The collection itself consists of the following data:
What is NetFlow?
NetFlow is a network protocol, developed by Cisco Systems, used for exporting collected IP flow statistics. This data is exported to a server, where it is collected, processed, aggregated and archived. It can then be reviewed in a more user-friendly form. ICmyNet.Flow performs all of these functions. There are numerous NetFlow protocol versions, most important of which are versions 5 and 9. Version 5 is commonly used on most Cisco NetFlow enabled devices. NetFlow version 9 is the latest version, created to support advanced technologies such as MPLS, IPv6, Multicast, VLANs, etc.
Which devices support NetFlow?
NetFlow® technology was developed by Cisco Systems, so all of the Cisco IOS routing platforms can export NetFlow data. From Cisco Catalyst switching platforms, only Catalyst 6500 series multilayer switches support NetFlow data export. Other vendors are also offering NetFlow-like capabilities on their network devices. These similar technologies are named differently by different vendors, for example J-Flow® by Juniper, NetStream® by Huawei, IPFIX® by Nortel etc.
Which versions of NetFlow protocols are supported by ICmyNet.Flow?
ICmyNet.Flow is based on Cisco NetFlow protocol versions 5 and 9.
However, ICmyNet.Flow has been tested to support NetFlow enabled Cisco devices and J-Flow enabled Juniper devices only.
Since it is based on Traffic Patterns (which are based on IP addresses) and not on physical interfaces, ICmyNet.Flow supports Softflowd, software generated NetFlow-like protocol., this free software is available at http://code.google.com/p/softflowd/ .
Indirectly, sFlow is supported if you convert it to NetFlow, using free tool such as sFlow Toolkit, available at http://www.inmon.com/technology/sflowTools.php .
What is the network traffic overhead generated by the NetFlow data export?
NetFlow data overhead is expected to be less than 0.5% of the total network traffic included in the statistics. This means, for instance, that 1 Mbps user traffic will produce approximately 50 kbps of additional traffic exported from routers to ICmyNet.Flow Server.
Can I switch on the commercial ICmyNet.Flow version without reinstalling my Trial version?
Yes. Upon purchase you will be given a new license key which can be installed through the current ICmyNet.Flow installation. This enables you to keep all the data and configuration of the system.
How can I estimate or measure the number of flows exported in my network?
You can find these useful statistics in the System Tab of ICmyNet.Flow. Number of total flows received, number of flows processed, as well as the number of flows missed due to license limitation are shown. This data is calculated and refreshed periodically. The interval is defined by the high grain interval from Control Panel, which is 5 minutes by default.
What can I do with the ICmyNet.Flow Trial version?
How can I buy ICmyNet.Flow?
Installation and getting started
What are the system requirements for installing and running ICmyNet.Flow?
Minimum system requirements depend on the number of flows that will be received and processed by the system. Minimum system requirements are shown in the following table:
I have successfully installed ICmyNet.Flow, but the charts are empty. What should I do?
You should check if your routers are exporting data to the correct IP address and UDP port of the ICmyNet.Flow server. The UDP port used by default is 2055. You can check or change this property in the Settings/Control Panel/General Tab. In the Settings/Control Panel/System Tab, you can also check if the Collector and Aggregator are up and running.
What is a traffic pattern?
Traffic pattern is a logical structure used by ICmyNetFlow data aggregation service to filter out traffic information based on specified criteria. Traffic information can be filtered out using the following criteria elements:
This list is being divided into two types of filters - mandatory (Source and destination IP) and optional (all others). Each filter can be set to include or exclude traffic information which matches the filter criteria. Detailed explanation is available in the user manual.
How to configure my routers to export NetFlow data to ICmyNet.Flow server?
How can I change default NetFlow export port number from 2055 to new one?
You can set the receiving UDP port number for ICmyNet.Flow in the Settings/Control Panel/General Tab.
Can I configure NetFlow protocol on my switches as well?
Layer 2 switches do not support NetFlow. You can configure NetFlow only on Cisco Catalyst 6500 Series multilayer switches.
Can I really monitor traffic from my branch office to a specific servers in my server farm?
Answer: Yes you can. You need to create a normal traffic pattern and include the branch office subnet in the "Local address ranges:" field, and the server farm subnet in the "External address ranges:" field.
How can I manage traffic going outside my network, to the Internet?
Answer: Create a normal traffic pattern and include the supernet which covers all your subnets in the "Local address ranges:" field (or add a couple of summarized subnets which are covering all your preconfigured subnets). The application will automatically exclude summarized subnets from "External address ranges:". That way you can collect traffic originating from your network and going to the Internet.
How can I manage my DNS traffic?
Answer: You can create a normal traffic pattern and include the IP address of your DNS servers in the "Local address ranges:".
How can I get more details about my traffic?
Answer: You can go to raw data section an select raw information that are stored in 5 minute files.
“ICmyNet.Flow system provides centralized traffic analysis for our network which consists of more than 170 locations spread over the state. Engineers from our NOC (Network Operation Center) are very satisfied with the system, because it helps them in troubleshooting processes. System has also tightened cooperation between the network team and systems and developers teams who are now solving issues together. The information provided by the system is very user-friendly and also helps me to take informed business decisions, especially in capacity planning.”
CIO, Health Insurance Fond Serbia