InMon Corp.

Version 6.7

Table of Contents

1. Introduction
1.1. Introducing sFlowTrend-Pro
1.2. About sFlow
1.3. Getting started
1.4. Navigating around sFlowTrend-Pro using browser history and bookmarks
1.5. Getting help
2. Installing sFlowTrend-Pro
2.1. Installation
2.1.1. Using the interactive installer
2.1.2. Installing with a Debian or RPM package
2.2. Connecting to sFlowTrend-Pro
2.2.1. Connecting with the Java client
2.3. Firewall configuration
2.4. Notes on installing sFlowTrend-Pro on Linux
2.5. Memory configuration for the sFlowTrend-Pro service
2.6. Configuring https certificates
3. The dashboard
3.1. Status
3.2. Thresholds
3.3. Top interfaces
4. Network
4.1. Interfaces
4.2. Counters
4.2.1. Counters charts
4.2.2. Units
4.2.3. Using the legend to view one interface counter
4.3. Top N
4.3.1. Top N charts Custom Top N charts
4.3.2. Units
4.3.3. Understanding the Top N traffic chart
4.3.4. Displaying end host information
4.3.5. Using the legend to drill-down on specific traffic
4.3.6. Filtering for specific traffic
4.4. Circles
4.4.1. Clustering end hosts
4.4.2. Automatically labelling chart elements
4.4.3. Units
4.4.4. Changing the time selection
4.4.5. Selectively labelling chart elements
4.4.6. Displaying end host information
4.4.7. Pan and zoom
4.4.8. Filtering for specific traffic
4.5. Root cause
4.5.1. Selecting the data to analyze
4.5.2. Understanding the results
4.6. Selecting a switch
4.7. Selecting an interface
5. Hosts
5.1. Statistics
5.2. Charts
5.2.1. Physical host charts
5.2.2. Virtual host charts
5.2.3. Using the legend to select one counter
6. Services
6.1. Counters
6.1.1. Counters charts
6.1.2. Using the legend to view one counter
6.2. Top N
6.2.1. HTTP top N charts
6.2.2. Units
6.2.3. Understanding the Top N services chart
6.2.4. Displaying end host information
6.2.5. Using the legend to drill-down into service data
6.2.6. Filtering for specific data
7. Using and configuring thresholds
7.1. Viewing thresholds
7.2. Threshold values and types
7.3. Defining thresholds
7.4. Root cause analysis
8. Events
9. Reports
9.1. Organizing report definitions
9.1.1. Adding a folder
9.1.2. Adding a report definition
9.1.3. Copying a report definition
9.1.4. Adding a report section
9.1.5. Copying a report section
9.1.6. Deleting a folder, report definition or report section
9.1.7. Importing and exporting report definitions
9.1.8. Reloading report definintions
9.1.9. Changing the name of a folder, report definition or report section
9.1.10. Reorganizing reports and sections using drag and drop
9.2. Editing report definitions and sections
9.2.1. Viewing report results
9.2.2. Editing a query section Defining how query results are displayed Editing a query using basic settings Editing a query using advanced settings Editing a query using scripted settings
9.2.3. Editing an HTML section
9.3. Running a report
10. Selecting a time period
10.1. Using the Time selector
10.1.1. Using custom time selection
10.2. Making a time selection by dragging the mouse
11. Filtering
11.1. Basic use of filters
11.2. Advanced use of filters
11.3. Terms available for use in filters
12. End host information
13. Configuration
13.1. User preferences
13.1.1. Setting the switch and interface naming policy Setting the switch naming policy Setting the interface naming policy
13.1.2. Chart settings
13.1.3. Changing your password
13.1.4. Restore warnings
13.1.5. Show alerts
13.2. System configuration
13.2.1. General system configuration Configuring the license Reporting problems to InMon File location
13.2.2. sFlow configuration
13.2.3. Configuring global SNMP settings
13.2.4. Proxy configuration
13.2.5. Email
13.3. Configuring agents in sFlowTrend-Pro
13.3.1. Adding a switch configured via SNMP
13.3.2. Verifying switch configuration and status
13.4. Configuring user authentication
13.4.1. Adding a user
13.5. Configuring subnets in sFlowTrend-Pro
13.6. Configuring action on events in sFlowTrend-Pro
13.7. Checking for updates
14. Troubleshooting and frequently asked questions
14.1. Troubleshooting sFlowTrend-Pro
14.1.1. Installation problems sFlowTrend-Pro requires the Java Run-time Environment (JRE) v7.0
14.1.2. No switches are listed in the Switch selector
14.1.3. When I select a switch in the Network, Top N tab, the chart is blank
14.1.4. When I select a switch in the Network Interfaces tab, the table is empty
14.1.5. When I select a switch in the Network Interfaces tab, the table rows have no counter values.
14.1.6. sFlowTrend-Pro is not receiving sFlow from a switch or host
14.1.7. sFlowTrend-Pro cannot communicate with the switch using SNMP
14.2. Frequently asked questions
14.2.1. After I select a switch to monitor, why does nothing happen?
14.2.2. When I start sFlowTrend-Pro, why do I get an error message "Cannot open UDP port 6343"?
14.2.3. Why are most of the bars in a Top N chart colored grey?
14.2.4. What firewall requirements does sFlowTrend-Pro have?
14.2.5. How do I change the time for which sFlowTrend-Pro stores data?
15. Advanced topics
15.1. Server custom configuration settings
15.2. Customizing protocol names
15.3. Customizing the web client appearance
15.4. sFlowTrend-Pro REST API
16. Reference
16.1. Menu reference
16.2. Database fields reference
16.2.1. Flows table fields
16.2.2. Counters table fields
16.2.3. Host counters table fields
16.2.4. Services table fields
16.2.5. Service counters table fields
16.2.6. Time fields
16.3. Filter functions reference
16.4. Database functions
16.4.1. Labels in database functions
16.4.2. Key functions countryCode countryName hostname ifAlias ifAliasOrVMName ifName ifOrVMName locate locateSwitch mac vendor getParent resolve subnet uuid vmName
16.4.3. Value functions count max min percent rate scale sum
16.4.4. Time functions format timestamp
16.5. Classes and objects defined within scripted reports
16.5.1. Objects defined report reportVars
16.5.2. Classes defined Chart Query Report Table
A. Configuring switches to send sFlow
A.1. Using SNMP to configure the switch to send sFlow
A.1.1. Configuring ProCurve switches to allow sFlow configuration via SNMP
A.2. Using the switch CLI to configure sFlow
A.2.1. Alcatel-Lucent OmniSwitch
A.2.2. Brocade (Foundry Networks)
A.2.3. D-Link
A.2.4. Enterasys
A.2.5. Extreme Networks
A.2.6. Force10 Networks
A.2.7. H3C
A.2.8. Juniper Networks
A.2.9. Netgear
A.2.10. ProCurve Networking by HP
B. Configuring hosts to send sFlow
B.1. Installing the host sFlow agent
B.2. Configuring the host sFlow agent
B.2.1. Linux configuration using DNS Service Discovery
B.2.2. Linux configuration using the configuration file
C. Recommended sampling rates
D. Acknowledgements and copyright

List of Tables

15.1. Protocol definition sections
16.1. Database key fields available for flows
16.2. Database value fields available for flows
16.3. Database key fields available for counters
16.4. Database value fields available for counters
16.5. Database key fields available for host counters
16.6. Database value fields available for host counters
16.7. Database key fields available for services
16.8. Database value fields available for services
16.9. Database key fields available for service counters
16.10. Database value fields available for service counters
16.11. Database time fields
16.12. JavaScript filter functions
C.1. Recommended sampling rates