Ipswitch Forums / Technical Preview Programs / WhatsUp Gold NetFlow Monitor Technical Preview

Netflow Traffic Status - Not Receiving

JeffK — Tue, 07 Oct 2008 10:54:48 GMT

I have installed WUG 12.3 as a test instance on a test server (completely separated from my production WUG server). Setup of Netflow was easy and using it has not been a problem over the last 30 days or so. I was troubleshooting a problem for a user at one of my 30 sites and realized that not all traffic for my sites are being logged. When I setup initially everything was working - I haven’t changed any configuration settings so I am not sure what went wrong. Three of my sites (out of 30 total) are not collecting data - I have verified each router is sending the data but for some reason the WUG server says it is 'not receiving' under Netflow traffic status.

Site 1 - Last active 9/11/2008 - Netflow traffic status 'Not receiving'
Site 2 - Last active 9/21/2008 - Netflow traffic status 'Not receiving'
Site 3 - Last active 9/21/2008 - Netflow traffic status 'Not receiving'

SQL Netflow.mdb at 4Gb - Collector Stops

mseidelm — Fri, 24 Oct 2008 10:07:30 GMT

I selected all options in the Database Maintenance section yet the Netflow.mdb is still at 4Gb...

Any ideas?

Thanks.

How to configured Cisco L2 & L3 Switch and whatup gold for Monitoring Interface

tompesh — Tue, 14 Oct 2008 07:24:07 GMT

Hi Dear,

Auctally i have intalled whats up gold 11 ver. Now i want to configured it to monitor L2 & L3 switch CISCO and Router.

Can anybody tell me step by step how to configured it to monitor interface and bandwidth.

Thanks in Adv..:)

Trying to configure NetFlow... 404 Page Not Found

bparker06 — Mon, 13 Oct 2008 16:10:20 GMT

I just refreshed my license for v12 to try out netflow, but when I click any of the Configure options under NetFlow in the web interface, all I get is 404 Page Not Found. Also none of the help seems to be available for netflow either. How can I fix this?

Thanks

Netflow not seeing sources

anorton — Fri, 10 Oct 2008 11:54:01 GMT

I posted in the WhatsUp Gold forum before I saw this forum. Sorry.

I installed the eval plugin of Netflow after upgrading to 12.3 today. I have setup the 2811 router to send info to the Netflow server. The Netflow server however is not seeing the information.

Here is the flow diagram

Netflow/WUP server --> Switch --> Firewall --> Router 2811

Do I need to specify a source on the router and then allow the traffic through the firewall?

Thanks

Source could not find NetFlow template?

HRA038 — Sat, 04 Oct 2008 00:08:32 GMT

What does NetFlow log message "Source could not find NetFlow template ID 1024" indicate?

Thanks...Scott

WhatsUp Gold NetFlow Monitor is now available!

Jason Benton — Mon, 06 Oct 2008 09:00:44 GMT

[url=http://www.whatsupgold.com/products/netflow/index.aspx]http://www.whatsupgold.com/products/netflow/index.aspx[/url]

Will Netflow Monitor work with HP3400cl switch?

MarcusClarke — Sat, 04 Oct 2008 19:53:22 GMT

Cam I monitor flows on an HP 3400cl switch? I can't tell if it supports NetFlow or if NetFlow supports sFlow.

Thanks,

Marcus

How to enable NetFlow Plugin?

doerks — Thu, 02 Oct 2008 04:17:23 GMT

Hi,

I´ve installed the final release version 12.3. It all works fine so far but the netflow plugin isn´t enabled.

How can I enable it?

regards dirk

NetFlow

beast — Tue, 30 Sep 2008 18:05:47 GMT

I installed Netflow on a Windows 2003 R2 server, configured the router(s), and am unable to see any devices in the NetFlow Sources list. After reading some of the other posts, I noticed that my WUG box was not listening on port 9999, so I have changed to 514 and restarted the services and am still unable to see any devices. It is also set in the correct timezone...

Any ideas?

Thanks

cannot install RC5

Mark Bell — Tue, 30 Sep 2008 14:42:00 GMT

When trying to install RC5, I keep getting an error while the installer is unpacking the files (see screen shot). The previous release unpacks just fine and I've never had a problem with any other software on this server. Thinking it might have been a corrupt download, I re-downloaded the installer but am still having the same problem. Any ideas?

NetFlow Preview and VoIP Monitor?

mseidelm — Thu, 25 Sep 2008 16:44:07 GMT

Hello all,

We have been a part of the Netflow preview for a few months now, and we have been looking at the VoIP plugin as well. I was wondering if it is possible to enable the VoIP plugin within RC5? If this will be our productiion enviornment, we want to make sure it will work.

Thanks,

Michael

SQL taking a pounding

Lionel K — Mon, 29 Sep 2008 04:21:39 GMT

Since I loaded RC5, the SQL server process has been chewing more and more CPU time, to the point now where the server is so unresponsive that it is unusable; even from the console.

It seems that a load more data is being processed than before.

What sort of production SQL server is envisioned for a live environment, considering I am only looking at about 50 streams at the moment.

NetFlow "stop service" button not working

Mark Bell — Thu, 11 Sep 2008 18:35:53 GMT

Under the NetFlow Database Table Maintenance window, I tried to use the "Stop Service" button but it does not seem to work. When I click it, I see the "Stopping NetFlow Service" button but it just sits there (screen shot attached). Under the "Services" panel on the server, I never see the service change state.

If I restart the service from the server console, the "Stopping NetFlow Service" window does update then goes away.

NetFlow HomePage Statistics?

mseidelm — Fri, 26 Sep 2008 11:09:54 GMT

What timeframe are the NetFlow homepage utilization statistics taken from, and is it adjustable?

Looking at my current homepage, I see one circuit at 167% utilization, but that was 30 minutes or so ago. How often is it refreshed?

Thanks,

Michael

"export" function file names

Mark Bell — Thu, 18 Sep 2008 20:09:38 GMT

This is a very minor thing but wanted to ask about it anyway... When clicking on the "Export Data" button that is available in many places, I saw that the file extension is .txt. Since it actually appears to be a tab-delimited file, can the extension be changed to something that would automatically be opened by Excel instead of it trying to use the text editor?

Could it be a comma-delimited file instead of tab-delimited? Comma-delimited seems to be more common for this type of data.

What would be really nice is if you had the same export options like in the main WUG program where you're given the option of text or Excel format and if you want text format, then you can choose comma- or tab-delimited.

I can't see interface description

Keunwoo Lee — Wed, 10 Sep 2008 00:27:41 GMT

hi~

I use 2byte language (Korean). but i can't see interface description.

How can i see that?

NetFlow TPP RC2 SQL error

Mark Bell — Thu, 11 Sep 2008 15:43:21 GMT

I just installed RC2 on my test server. Since this release supports upgrading, I just did a restore of my production WUG 12.0.2 database to this server in SQL then installed RC2 from scratch. Everything with the installation and database upgrade went very smoothly. The problem I had so far is when attempting to configure NetFlow information on existing devices. I already had three devices that were sending NetFlow information to this server and they popped right up after installation of RC2. However, I went into the NetFlow page for one of these sources and was configuring the "Hide" settings for some of the interfaces on the router. When I clicked "OK" to close the "NetFlow Source" window, I got the following error message (screen shot also attached):

"There was an error while attempting to save the interface data to the database. Error:
Error=80040E57
ErrorMessage=IDispatch error #3159
Description=[Microsoft][ODBC SQL Server Driver][SQL Server] Arithmetic overflow error converting expression to data type int."

I'm running SQL 2005 with SP2 and latest patches.

I finally just Cancelled out of the "NetFlow Sources" window. The strange thing is, when I went back in to the device and change the "Hide" settings for interfaces, it worked just fine. I tried recreating the problem with another NetFlow device but again, it worked just fine.

I know this is not much help since I can't seem to reproduce the problem but I did want to go ahead and post this just in case it might be helpful in some way.

WhatsConnected Technical Preview Program!

Jason Benton — Mon, 08 Sep 2008 13:20:48 GMT

[center][img]http://preview.ipswitch.com/images/banner_general.gif[/img][/center]

[b]Get a Whole New Perspective of Your Network![/b]

Ipswitch is proud to announce the WhatsConnected Technical Preview Program! WhatsConnected is a layer 2 and layer 3 network discovery and visualization plug-in for WhatsUp Gold that equips network managers with a comprehensive tool set to accurately depict and visualize their device connectivity down to the individual port. With the total insight offered through WhatsConnected, you can understand your network from top to bottom and focus on keeping it running securely and at peak performance.

As a fully integrated plug-in for all editions of WhatsUp Gold v12.3, WhatsConnected provides a simple approach for you to understand your network infrastructure to identify and create powerful monitoring strategies. A simple right-click on any topology map will export device information from WhatsConnected to WhatsUp Gold and automate the creation of consolidated MapViews along with performance and active monitors for the connected interfaces.

Visit the [url=http://preview.ipswitch.com/WhatsConnectedTPP.asp]WhatsConnected Technical Preview Program[/url] site for more information.

Thank you for your participation!

[b]Ipswitch Network Management Product Team[/b]

Clean install from v11 with 12.3_pre code released 9/9

rerice1 — Wed, 10 Sep 2008 09:13:46 GMT

I installed the 12.3_pre code released yesterday over v11 with no problems. SQL was updated from 2000 to 2005, the db was converted and I had no issues with startup (other then the usual invalid license). I did get an error message "string IDS_DACTIONS_MSG was not found in string table" on restart but WUG came up OK.

Source missed packets

sha_lon — Mon, 08 Sep 2008 16:42:10 GMT

I am getting a lot of servers stating that:

Source x.x.x.x missed x of x packets (5 % )

The percentage keeps increasing. what should i do? also after 1 hour ,Netflow traffic status is Not Receiving.

Flows associated with IP address not interface.

cohmike — Tue, 26 Aug 2008 13:38:01 GMT

I have a question and it may be as simple as user training so I hope someone can help. The core of our network is 4 Cisco 6513 Switches and as you can imagine we have lots of interfaces and multiple paths. If I want to search netflow information for a "receiver" I cannot see all of the traffic destined for that globally. I have to select an interface and determine if there is any traffic flowing to it.

The real world example if I am trying to decommission a server and I want to see who is talking to it so I enter that information into the search box, and although I try to select multiple interfaces in the window it only shows me one at a time.

Is there a way to do what I am looking for or can we consider it a feature request since all of the data should be in the database?

thanks

Mike

SQL Error When Modifying Device

mseidelm — Wed, 27 Aug 2008 14:53:07 GMT

One issue and one suggestion.

Issue: I receive the following error when clicking "OK" on the following source page. I believe this is a "too many characters" for allowed field message, but it is using the interface description...

And the suggestion: On this same page, if I uncheck the collect data box and I do not have the correct SNMP credentials, I cannot save or OK the changes. I have to manually choose None from the SNMP credentials drop down. If I hit ok with incorrect credentials, it does not save my change (even if just unchecking the box for collecting data). It still times out because of incorrect SNMP credentials.

Thanks,

Michael

Unknown Top Sender/Receiver domains

BruceMc — Wed, 27 Aug 2008 10:24:42 GMT

When I look at the top sender and receiver domains, the bulk of the traffic is unknown. When I click on unknown to drill down, I receive a speed graph, not a breakdown of the unknown domains.

best regards.......Bruce

Netflow runs for about an hour then stops

bostiles — Tue, 05 Aug 2008 15:38:36 GMT

Today, I un-installed the application, reinstalled, pointed a few Cisco routers to the WUG server and started getting results.

After about 1 hour, the app stops collecting, old data is available in the reports. First time I reboot server and it started working, second time, I just restarted the service and again it started. Now waiting for another hour to pass and see if it fails. During all this, my WUG app never complained.

500 Fatal error while getting reports-services no longer available-WUG web access no longer available

rerice1 — Mon, 11 Aug 2008 12:35:41 GMT

While trying to get SSG reports, load bars kept running multiple times with no change. When I tried to use BACK arrow, I got a 500 Fatal error (screen shot attached). Unable to get anything on web access, so closed and reopened web access-still no success. Shut down WUG and restarted. No success. Shut down everything and rebooted-system did not come up. Rebooted again and came up with LAST GOOD CONFIG. Restarted WUG and got message SERVICE not running (attached). Attempted to start service: failed - invalid handle (attached). Displayed services-nothing showing for IPSWITCH (attached).

WUG starts and I can view devices and make changes but nothing on web access.

**Reinstalled WUG 12-3 and web access now working, until I went to NETFLOW and made a port change. Then I received same 500 FATAL ERROR message. IPSWITCH services are still there and started this time (can not attach-reached limit)

differences in reported performance

Mark Bell — Mon, 11 Aug 2008 19:07:20 GMT

I monitor my router with both WUG 12 (production) SNMP performance monitor as well as having it report NetFlow info to 12.3. I have noticed differences in reported utilization between the two products and monitoring methods. NetFlow shows far lower utilization than the SNMP monitor does. I know the SNMP monitor is correct because I have looked at the interface utilization through the CLI while the event is running. Both products have the correct interface speeds configured so I'm wondering if there are any ideas as to what might be causing the discrepancy. I've attached screen shots of the WUG 12 Interface Utilization graph as well as the 12.3 NetFlow report.

SSG reports-"manage content" column width not reflected in actual size

rerice1 — Mon, 11 Aug 2008 11:24:26 GMT

Created 2 new reports with SSG functions and set column width to 700 and 300. Report header takes 700 size but graph size remains constant at 500, even if report set to 700 or 300. Size of graph will change if each one done indiviually. Also, will not create 2 column reports-size 300.

Reports disappear when changing from 2 columns to 1

rerice1 — Mon, 11 Aug 2008 10:41:42 GMT

Selecting existing reports and changing them from original setup 2 columns to 1 column , all reports on the right side of the screen drop off of the report. In earlier versions, they would simply move under the reports on the left side of the screen.

Port Classifications

BruceMc — Thu, 17 Jul 2008 10:32:18 GMT

I am clicking on view to see unclassified traffic. This brings up the Unclassified Traffic screen. Would it be possible to add the ability to sort within the columns (Source IP, Source Port, etc.)?

Also, in reviewing the Unclassified traffic, I noticed that ICA (port 1494) was disabled. I was a little surprised since this is a pretty common application. How do you determine which ports are enabled / disabled by default?

thanks.................Bruce

WhatsUp Gold NetFlow Monitor Overview

Jason Benton — Mon, 23 Jun 2008 15:25:44 GMT

Here's a brief video that will give you an overview of the NetFlow Monitor product.
[url=http://preview.ipswitch.com/demos/NetFlowMonitorOverview/NetFlowMonitorOverview.html]http://preview.ipswitch.com/demos/NetFlowMonitorOverview/NetFlowMonitorOverview.html[/url]

database maint causes message "missing or invalid license"

rerice1 — Mon, 11 Aug 2008 15:13:24 GMT

during db maint, received message "missing or invalid license" when doing OPTIMIZE or VALIDATE under PERFORMANCE. Also occurred when doing PURGE EXPIRED under TABLE MAINTENANCE. So, looks like whenever you stop/start WHATSUP service.

feature suggestion

Mark Bell — Mon, 11 Aug 2008 19:49:22 GMT

While viewing the "NetFlow Bandwidth Usage Report" that shows "Bandwidth Usage by Host", it would be handy if the host name or IP address shown were a hyperlink to the Interface Details page with the Receiver set to that host's IP address. This is certainly nothing major but it would just save a few clicks while trying to track down issues.

Install/ Uninstall not clean

rerice1 — Mon, 11 Aug 2008 10:18:10 GMT

Loaded 12.3 and tried to use old db. Later found out that no db can be copied over. When I tried to uninstall, it looked and acted just like the install but failed. Ran uninstall again and it said it was uninstalling. Rebooted and upon restart, got message that WUG was reconfiguring but did not show up in directory. Installed again and finally came up.

SQL Server 2000 End of Life

Bergy — Fri, 08 Aug 2008 10:29:33 GMT

As of April 8, 2008, Microsoft retired mainstream support for SQL Server 2000. Coincidentally, WhatsUp Gold support for SQL Server 2000 ends in v12.0. Microsoft now supports SQL Server 2005, and is planning to release SQL Server 2008 by summer’s end. In light of the performance improvements offered in the newest versions of SQL Server, WhatsUp Gold is leveraging these new performance capabilities in future releases, beginning with v12.3, projected for release in September. WhatsUp Gold support for SQL Server 2008 is anticipated by mid-2009.

Product Management
WhatsUp™ Gold
Network Management Division
Ipswitch, Inc.

Invalid or Missing License

Lionel K — Fri, 27 Jun 2008 03:14:51 GMT

I had it working fine, but then, for some reason it stopped collecting stats.

I have uninstalled the application and reinstalled it (several times).
I have requested a new license key (twice).
I have tried an on-line activation and an off-line activation - in both cases, the key is accepted.

However, when I run Whatsup, it pops up the message, "Invalid or Missing License"

Help!!!!

Improvement suggestion

tom_olson68 — Thu, 24 Jul 2008 15:25:55 GMT

After using the netflow collector for a couple days now, it looks like a very nice product and easy to use. I look forward to the release of this product.

One improvement suggestion I have is to add more integration with WhatsUp Gold. For example, from what I see, it looks like two separate products and a quick link to switch between them. We constantly monitor bandwidth and look at utilization charts and history. When we see sustained high network utilization, we start to investigate. It would be really slick if there were a quick link on the utilization chart that opens a window directly to the device in netflow to get the detailed info about the high traffic, rather than having to launch netflow and drill into the device as a separate app.

As it is today, this product will definately cut down the time it takes us to track down the bandwidth consuming devices and apps. A little more integration with WhatsUp Gold would be a nice perk for both tools.

Regards,

Tom

Cannot delete netflow groups

tom_olson68 — Tue, 22 Jul 2008 13:42:27 GMT

I created four NetFlow Groups, now I want to delete them. When I click delete, I get the "are you sure..." message, click yes, then receive an SQL error. Ideas?

Unnamed NetFlow Sources

BruceMc — Tue, 22 Jul 2008 07:39:07 GMT

I just enabled NetFlow on my 65xx switch. I have added the switch as a NetFlow Source. When I edit the source I see the following interfaces:

Unnamed (0)

Unnamed (309)

Unnamed (90)

Unnamed (370)

Unnamed (82)

Unnamed (64)

Unnamed (67)

Unnamed (338)

All interfaces show the type and status as unknown. Speed shows up as undefined.

best regards........Bruce

Pie Charts

BruceMc — Tue, 22 Jul 2008 11:14:27 GMT

Some of the pie charts are truncating portions of the descriptive text.

Example:

mta10nt.mta.us.solvay.com might only show mta10nt.mta.us.solvay.c

mta15ntweb1.mta.us.solvay.com might only show a.us.solvay.com

I can provide additional examples and screen shots if necessary.

best regards........Bruce