What is Netflow?
Netflow is a protocol that acquires network traffic data for analysis by engineers. Netflow data is rich in information that, if acquired and organised logically, gives insight into application and user bandwidth consumption, QoS measurement, latency and other measurable data on the network.
This type of monitoring gives you an in-depth view of the data moving through your network. Valuable extraction of information relating to your environment is a key element to an optimised environment.
Enterprises with multiple network applications, internal websites and other bandwidth reliant services are able to utilise Netflow data to identify bottlenecks and other causes of performance issues.
In many cases, resources span multiple geographic locations, increasing the dependency on optimised bandwidth.
IRIS Flow Collector
IRIS Flow Collector is an engine that captures and processes Netflow J- flow or S-flow data that is exported from enterprise or provider core routers at a very high rate. Each flow engine is responsible for the collection and storing of this data, and to respond with updated information to queries originating from the IRIS portal.
The Troubleshooter module allows you to explore traffic per device in a way that makes problem identification easier. With a very visual representation of data via the Troubleshooter, engineers are able to identify network issues rapidly.
Iris Flow Explorer is a reporting engine that gives free reign over the search function in the Netflow database. Advanced searches using the Flow Explorer will allow you to build graphs depicting traffic patterns and data.
The Flow Tracker module is designed to “track” network data on a predefined query. The Flow Tracker system is highly scalable, with the ability to create 11 000 flow tracks on a single flow collector. The IRIS Flow Collector gives engineers and managers a powerful tool in the pursuit of a stable, predictable environment.
Netflow data typically contains the following values:
- Source and destination IP
- IP protocol
- Type of service (TOS)
- Source and destination port numbers