NetFlow Analysis

When monitoring the performance of applications and networks, the more insight you have into the actual traffic, the better. NetFlow provides this insight.

Without the need of probes or sniffers, you can quickly and continuously monitor the makeup of the traffic traversing your most critical links. SevOne's NetFlow tool allows you to quickly spot bandwidth hogs and wasteful traffic, and gives you an understanding of how applications are using your network. These insights are critical to the decisions on how best to prioritize traffic and on the creation of policies to eliminate wasteful traffic.netflow analysis

To help you take full advantage of valuable NetFlow data for use in network and application performance management, SevOne created the SevOne Dedicated NetFlow Collector (DNC). Our DNC leverages the same architecture and design principles used in other SevOne appliances to create the industry’s most comprehensive, scalable and affordable solution for Flow collection and reporting.

Unique Capabilities:

Complete NetFlow Support

  • SSevOne Supports sFlowevOne PAS, vPAS and DNC incorporate all flavors of flow collection technology in addition to NetFlow, IPFIX, sFlow, NetStream, and Juniper J-Flow.
  • Full Cisco Flexible NetFlow support — the Cisco Network Analysis Module (NAM) family of products, Network Based Application Recognition (NBAR), and Medianet Performance Monitor compatible — is included.
  • Support for all 200+ available fields of NetFlow means you are not limited to predetermined fields or templates.

Scalable Flow Collection

  • SevOne collects up to 250,000 flows per second, or 15 million flows per minute, and can be peered with any number of SevOne appliances. The proprietary SevOne Cluster™ technology allows you to grow your data collection infinitely.

Immediate Access to Historical Data

  • Collecting at one-second intervals, SevOne appliances store up to seven days of raw NetFlow data and one year of aggregated flow data at one-minute intervals for each report template and interface, allowing you to detect micro-spikes or short bursts of activity that can cause network disruption.
  • SevOne enables troubleshooting of low bandwidth and high impact events such as DNS storms, which is not possible with other flow-based solutions.

Detect Micro Spikes

  • One-second visibility with raw data allows you to see small bursts of traffic, which can reveal important information. Other tools miss these micro spikes when they average their data and provide aggregated reports.

One-Click Metric-to-Flow Troubleshooting

  • When troubleshooting an alert such as a spike in utilization, SevOne provides one-click navigation to Flow reports that instantly show the associated traffic for the exact period of time for that specific interface, reducing troubleshooting time and providing rapid isolation of the infrastructure component at fault.
  • Our Universal Metric to Flow feature allows any metric (e.g., Cisco IP SLAs, JMX, and WMI) to be associated with Flow data to provide the same one-click navigation.

Identifies Rogue Applications

  • With port-based identification, SevOne provides a list of recognized applications. You can customize this list to track and report on applications specific to your environment.
  • You can use “Type of Service” (ToS) Filters to identify the traffic running on your network, as well as non-approved applications that are consuming bandwidth. You can also determine the impact of the traffic and the non-approved applications on your Quality of Service (QoS) policies.

Identify Top Talkers

  • SevOne provides a Top Talkers report to show quickly what type of traffic contributed to the spike. From this Top Talker view, SevOne enables users to resolve DNS as well as check the “Next Hop.”

Additional Information