NetFlow v9 Export
Allows network managers to add new enhanced Layer 7 monitoring statistics to NetFlow records, which can be exported to third-party reporting packages.
ManageEngine NetFlow Analyzer which leverages on NetFlow v5, v9 or similar flow format data to report on bandwidth usage and help in traffic analysis can work with Exinda devices as these devices exports both NetFlow v5 and v9 flows. You can now analyze your traffic usage based on applications, source, destination, QoS and conversations using NetFlow Analyzer.
To enable NetFlow on Exinda, on the appliance GUI, navigate to NetFlow Configuration from System Setup. The options here allows users to configure Exinda for NetFlow export to third party applications like NetFlow Analyzer and set the fields for NetFlow version 9 export.
First, add the NetFlow Analyzer details to the Exinda device by entering the IP Address of the server where the product is installed, the listener port (9996 by default) and setting the version of NetFlow to be used. You can configure either NetFlow v5 or v9 export. If NetFlow v9 export is selected some additional options have to be configured. NetFlow Analyzer supports NetFlow v9 export but as of now we recommend NetFlow v5 export from Exinda.
Interested in trying NetFlow Analyzer with your Exinda device? We have a fully featured 30 day trial . Download the trial and make use of our free technical support to answer your product related questions.
Regards,
Don Thomas Jacob
Download | Interactive Demo | Product overview video | Twitter | Customers
Exinda Press Release :
http://www.prweb.com/releases/Exinda_ExOS_6dot0/WAN_Optimization/prweb4798734.htm
Configuration Reference :
http://www1.exinda.com/servlet/servlet.FileDownload?file=01520000000wu0c
Hi Adam,
Apologies for the delayed approval. The system somehow failed to notify on the pending post.
As for your question, I am not really sure as we have not had a chance to work with any pcap files from Exinda. The L7 Application ID seems to be something like Cisco’s Flexible NetFlow NBAR. And, according the Exinda guide: “The Application ID to Name mappings are exported as an options template.”
By the way, does your product support NBAR via SNMP or Flexible NetFlow for reporting on possible peer to peer traffic?
What ID are they using for the appID field? Also, do they publish a list of the ID to AppName mappings?
Hoping they implemented something similar to Cisco’s NBAR fields in IOS 15.1.