NetFlow Reporting

NetFlow Collection and Reporting

SevOne is an industry leader in support for NetFlow and other flow-based technologies, including Cisco NetFlow versions 5-9, Flexible NetFlow, IPFIX, sFlow, and J-Flow. SevOne collects and reports on raw NetFlow at one second intervals, and can aggregate and report on NetFlow for a large number of templates. This granular view helps customers detect micro-spikes or short bursts of activity that can cause network disruption which won’t appear on aggregated NetFlow Reports which average data over time. Raw, or non-aggregated NetFlow, provides critical data to network troubleshooting teams.

Flexible NetFlow and IPFIX
SevOne supports all available fields of NetFlow and does not limit customers to predetermined fields or templates. Each SevOne Dedicated NetFlow Collector allows customers to build their own templates and select from over 200 fields of data. New applications of Flexible NetFlow include advanced application recognition via NBAR and reporting on latency, jitter, and packet loss for Cisco Medianet applications.

Download the NetFlow Performance Management Solution Datasheet to learn how SevOne seamlessly integrates the industry’s highest capacity NetFlow collection and reporting with SevOne's highly parallel, polling-based monitoring to provide real-time troubleshooting, traffic analysis, and capacity planning – at a scale that is simply unmatched by other vendors.

Network Analysis Module
The Cisco® Network Analysis Module (NAM) family of products provides granular traffic analysis, application performance metrics, voice analytics, and deep packet captures for Cisco Borderless Networks and Cisco data centers. By collecting NAM data, SevOne provides comprehensive reporting for response time metrics like Network Delay, Application Delay, and Total Delay. By supporting NAM, SevOne delivers valuable performance visibility to help customers recognize, diagnose, and resolve performance degradations of their critical applications.

NetFlow Customer Use Cases

Troubleshooting
Type of Service Filters can identify traffic on the network and the impact on Quality of Service policies. One SevOne customer reported that this type of report showed them that a user was conducting an unsupported Video Call on their network and utilizing most of their allocated VoIP bandwidth. Another SevOne customer had a business unit report that they could not complete via their order entry process on the network and wanted to know what caused the problem. IT Operations used SevOne SNMP Instant Graphs to identify a spike in utilization on the network and then with a single click, ran a NetFlow report to identify what type of traffic caused the spike. They identified increased internet usage and multiple concurrent YouTube sessions that saturated their network and caused the slowness. IT changed a firewall rule and resolved the issue returning the level of service required by order entry.

Detecting Micro Spikes
SevOne supports Non-Aggregated NetFlow to provide individual flow reporting which includes one second visibility.  This granular view allows users to see small bursts of traffic which most legacy tools miss when they average their data and provide aggregated reports.

Identifying Applications
With port based identification, SevOne provides a list of recognized applications. Customers can customize this list to track and report on applications specific to your environment. SevOne can then aggregate the amount of traffic on one segment to show how much of your bandwidth this application consumes.