Network Analyzer with J-flow

This support forum board is for support questions relating to Nagios Network Analyzer, our network traffic and bandwidth analysis solution.
net_m
Posts: 7
Joined: Thu Oct 02, 2014 12:56 pm

Network Analyzer with J-flow

Post by net_m »

Hi All,

I have some questions about Network Analyzer and J-flow. We are using Nagios Network Analyer to monitor juniper network products for now. You may know that Juniper is using Jflow which is similar as Netflow.
1: I am thinking my configuration is right, however, the section of "Top 5 talkers" is empty. No data under this section. I do see Bandwidth graph. (Please see attached pic.)

2: For now, I only apply j-flow into one interface in our router. Do I need to apply J-flow to other interface in the router which I want to monitor?


Thanks,
You do not have the required permissions to view the files attached to this post.
net_m
Posts: 7
Joined: Thu Oct 02, 2014 12:56 pm

Re: Network Analyzer with J-flow

Post by net_m »

More:

I just realized one more issue make me confused. As I said in the last section, for now, I only apply J-flow into one port in our router. One "Source" in the network analyzer side.

When I created a "Source" in Network Analyzer, I put loopback interface IP address as "sender IP ". My question is: If I apply J-flow into one more interfaces in my router, and in Network Analyzer side, continue using the same source to capture J-Flow data. How can I know which data coming in or going out through which interface.

Say, I apply J-flow to two interfaces, fa1/0 and fa1/1 in my router. And in the network Analyzer side, I have a "Source" which is using loopback interface of router as "Sender IP". How can I determine how much traffic belong to fa1/0, how much coming through fa1/1?

Or, you guys have any suggestions for my case?

Thanks,
sreinhardt
-fno-stack-protector
Posts: 4366
Joined: Mon Nov 19, 2012 12:10 pm

Re: Network Analyzer with J-flow

Post by sreinhardt »

1: I am thinking my configuration is right, however, the section of "Top 5 talkers" is empty. No data under this section. I do see Bandwidth graph. (Please see attached pic.)
We have an in-house juniper device, that I would be happy to test this with when we are back from the conference(Friday). I'm fairly certain that this would have been used for testing while developing NNA, but I cannot personally be sure.
2: For now, I only apply j-flow into one interface in our router. Do I need to apply J-flow to other interface in the router which I want to monitor?
I would highly doubt this would be an issue for us to use when displaying data, but again I will have to test in-house before I could be 100% certain.

As to your last question, I think it depends on how juniper and jflow label the traffic. Just because its passing through your loopback interface might not mean that the juniper will loose the initial source and destination, again, I'll really have to test this and see.
Nagios-Plugins maintainer exclusively, unless you have other C language bugs with open-source nagios projects, then I am happy to help! Please pm or use other communication to alert me to issues as I no longer track the forum.