Combine Observer and NetFlow for Cost-Effective Visibility

NETWORK RECORDER WEB SITE TROUBLESHOOTING WITH NETFLOWGaining visibility across every port on a global network can be a large investment using probes alone. Partnering NetFlow or sFlow® technology with Observer is a cost-effective way to extend network visibility and perform in-depth packet analysis.

Configure Network Instruments Probes to aggregate metrics from up to 512 NetFlow devices into a centralized Observer console, allowing engineers to look for signs of problems and determine where to place additional monitoring resources. Then use probes for in-depth troubleshooting, long-term packet capture, or application analysis.

Use NetFlow and the Observer analyzer to:

• Perform root-cause analysis
• Obtain complete infrastructure visibility
• Resolve application performance issues
• Maximize your infrastructure investment

How NetFlow Works

NetFlow is a Cisco-developed “push” technology found within many routers and switches that operates as a first-line diagnostic monitor by detecting abnormal activity as it occurs. NetFlow statistics are captured and processed by Layer 3 devices and sent periodically to designated collectors like the Observer analyzer. Because NetFlow is commonly included with enterprise infrastructure, no additional investment beyond the flow collector is needed to achieve enterprise-wide visibility.

Go from Tracking to Troubleshooting with Observer

Coupling Observer with NetFlow provides complete problem resolution. Use Observer Reporting Server’s NetFlow views to review network health on NetFlow devices in aggregate.

Next, look for any abnormalities or causes for concern. For example, does a device show an abnormal number of transactions? For greater detail, point our GigaStor appliance toward the device and begin troubleshooting. Observer connects to GigaStor to display application response time, conversation delay, and more. With this top-down, fully integrated view, you gain complete visibility and problem resolution.

“Tracking NetFlow through Observer offers many benefits. NetFlow data reveals abnormal activity on the network and then I can drill down on that particular activity with Observer. Although NetFlow shows diagnostic data, I need Observer to resolve the issue particularly at the application level. As a result, with Observer I can collect and also act upon NetFlow data already running across our networks.”

Stephen Joseph
LEK Securities

Better Allocate Resources with NetFlow and Observer

NETFLOW AND APPLICATION ANALYSISFor large organizations, Observer can collect data from up to 512 NetFlow devices per monitoring session. Use NetFlow data to first determine what area of your network needs attention. Next, assign a Network Instruments probe to that NetFlow device. This ensures you can obtain critical metrics like response time, application performance, and bandwidth utilization when you require it.

For smaller organizations with few NetFlow devices, the Network Instruments Probe collects real-time NetFlow statistics and trending data from any NetFlow device. Use NetFlow’s data to immediately resolve issues or switch to the Probe for in-depth analysis.

NetFlow Statistics

NETFLOW STATISTICS VIEWBy using Observer probes to aggregate flows from various NetFlow devices, the Observer console tracks the following NetFlow metrics:

• Real-Time Statistics
  o Top Talkers
  o Pairs Matrix
  o VLAN Analysis
  o Application Awareness
• Long-Term Trending