Page 1 of 1

Network Analyzer with J-flow

Posted: Mon Oct 13, 2014 4:05 pm
by net_m
Hi All,

I have some questions about Network Analyzer and J-flow. We are using Nagios Network Analyer to monitor juniper network products for now. You may know that Juniper is using Jflow which is similar as Netflow.
1: I am thinking my configuration is right, however, the section of "Top 5 talkers" is empty. No data under this section. I do see Bandwidth Graph. (Please see attached pic.)

2: For now, I only apply j-flow into one interface in our router. Do I need to apply J-flow to other interface in the router which I want to monitor?


Thanks,

Re: Network Analyzer with J-flow

Posted: Mon Oct 13, 2014 4:29 pm
by net_m
More:

I just realized one more issue make me confused. As I said in the last section, for now, I only apply J-flow into one port in our router. One "Source" in the network analyzer side.

When I created a "Source" in Network Analyzer, I put loopback interface IP address as "sender IP ". My question is: If I apply J-flow into one more interfaces in my router, and in Network Analyzer side, continue using the same source to capture J-Flow data. How can I know which data coming in or going out through which interface.

Say, I apply J-flow to two interfaces, fa1/0 and fa1/1 in my router. And in the network Analyzer side, I have a "Source" which is using loopback interface of router as "Sender IP". How can I determine how much traffic belong to fa1/0, how much coming through fa1/1?

Or, you guys have any suggestions for my case?

Thanks,

Re: Network Analyzer with J-flow

Posted: Wed Oct 15, 2014 4:08 pm
by sreinhardt
1: I am thinking my configuration is right, however, the section of "Top 5 talkers" is empty. No data under this section. I do see Bandwidth Graph. (Please see attached pic.)
We have an in-house juniper device, that I would be happy to test this with when we are back from the conference(Friday). I'm fairly certain that this would have been used for testing while developing NNA, but I cannot personally be sure.
2: For now, I only apply j-flow into one interface in our router. Do I need to apply J-flow to other interface in the router which I want to monitor?
I would highly doubt this would be an issue for us to use when displaying data, but again I will have to test in-house before I could be 100% certain.

As to your last question, I think it depends on how juniper and jflow label the traffic. Just because its passing through your loopback interface might not mean that the juniper will loose the initial source and destination, again, I'll really have to test this and see.