traffic analysis on windows servers with whatsup flow publisher
DESCRIPTION
Learn how WhatsUp Flow Publisher gives you traffic analysis on your Windows servers without requiring flow-enabled hardware.TRANSCRIPT
![Page 1: Traffic Analysis On Windows Servers with WhatsUp Flow Publisher](https://reader033.vdocuments.site/reader033/viewer/2022052410/5561e4b4d8b42ab1068b4cc1/html5/thumbnails/1.jpg)
1
Traffic Analysis How ToWebinar Series
Traffic Analysis on Windows ServersDecember 10, 2009
![Page 2: Traffic Analysis On Windows Servers with WhatsUp Flow Publisher](https://reader033.vdocuments.site/reader033/viewer/2022052410/5561e4b4d8b42ab1068b4cc1/html5/thumbnails/2.jpg)
2 2
Agenda:
Today’s Presenters:• Kevin Gillis, VP Product Management, Network Management• Jason Williams, Product Manager & The WhatsUp Guru
Agenda:– Overview– Flow Publisher Overview– Server Based Traffic Analysis– Technical Demonstration– Q&A– Next Steps
![Page 3: Traffic Analysis On Windows Servers with WhatsUp Flow Publisher](https://reader033.vdocuments.site/reader033/viewer/2022052410/5561e4b4d8b42ab1068b4cc1/html5/thumbnails/3.jpg)
3
The Need for Traffic Analysis
• My network is slow and I do not know why…– Existing tools don’t give me any or enough visibility…
• Into user and application network bandwidth utilization
• Into network performance issues
• Into locating and troubleshooting issues
• Into applications and their effect on the network
• Into security breaches and unauthorized usage
• Current solutions– Require expertise in packet level analysis– Require device or network upgrades/downtime– Require investment in appliances or probes
Tools are either too expensive or complex to deploy
![Page 4: Traffic Analysis On Windows Servers with WhatsUp Flow Publisher](https://reader033.vdocuments.site/reader033/viewer/2022052410/5561e4b4d8b42ab1068b4cc1/html5/thumbnails/4.jpg)
4
Flow Publisher v1.0 Summary
• Flow data generated from raw network traffic– Convert raw traffic into NetFlow v1, v5 and v9 compliant flow records
• Full range of NetFlow information• Not sampled flow data
• Pinpoint or broad traffic analysis– Virtually any network device supporting port mirroring– Passive TAPs (Test Access Point)– Windows servers and any running applications (e.g. Oracle, SAP,
Exchange)
• High impact – non-invasive and inexpensive to maintain– Leverages existing network infrastructure– No device hardware or software upgrades required– Does not require network or device downtime
Enables flow analysis for non-flow capable devices
![Page 5: Traffic Analysis On Windows Servers with WhatsUp Flow Publisher](https://reader033.vdocuments.site/reader033/viewer/2022052410/5561e4b4d8b42ab1068b4cc1/html5/thumbnails/5.jpg)
5
Flow Publisher v1.0 Features
• Two Components1. Agent Manager Interface
• Configure and manage a single or multiple agents
2. Flow Publisher Agent• Processes raw traffic data• Standalone installation
– Dedicated Windows computer
– TAP or mirrored interfaces
– Accepts raw traffic from up to 4 individual interfaces
• Hosted installation– Directly on Windows Servers
» Application monitoring
» User monitoring
» VMware Virtualized Systems
Software only solution
2.
1.
![Page 6: Traffic Analysis On Windows Servers with WhatsUp Flow Publisher](https://reader033.vdocuments.site/reader033/viewer/2022052410/5561e4b4d8b42ab1068b4cc1/html5/thumbnails/6.jpg)
6
Flow Publisher v1.0 Features cont’d
• Integrates with v14.x of WhatsUp Gold and v2.0 of Flow Monitor for:– Real-time traffic monitoring
and analysis
– Threshold alerting
– 40+ reports (web and mobile)
• Maps MAC addresses to reported interfaces
• Jumbo and fragmented packet support
• Configurable logging– 3 levels of detail
• 2 levels of capture– Normal
– Promiscuous
![Page 7: Traffic Analysis On Windows Servers with WhatsUp Flow Publisher](https://reader033.vdocuments.site/reader033/viewer/2022052410/5561e4b4d8b42ab1068b4cc1/html5/thumbnails/7.jpg)
7
Agent & Collector High-level InteractionServer with Flow
Publisher agent Installed
TAP
Switch
Switch forwards mirrored traffic to Flow Publisher agent
Agent forwards NetFlow records to Flow Monitor collector
TAP forwardsbi-directional traffic to Flow Publisher agent
Server based agent forwards NetFlow records to Flow Monitor collector
`
Flow Publisher agent on PC
`
WhatsUp Gold and Flow Monitor
collector
Three flexible deployment models provide unlimited choices
![Page 8: Traffic Analysis On Windows Servers with WhatsUp Flow Publisher](https://reader033.vdocuments.site/reader033/viewer/2022052410/5561e4b4d8b42ab1068b4cc1/html5/thumbnails/8.jpg)
8
Application and User Traffic Analysis
• Rapid isolation of server versus network based issues• Insight into reasons for application traffic
– Traffic loads– Users– Peak usage timeframes
• Locate under and over subscribed applications and servers– Standalone servers– Virtualized servers
• Traffic to individual virtual machines (VMs)
Why is server based traffic analysis important?
Creates opportunity to optimize server infrastructures based upon actual user and application utilization data
![Page 9: Traffic Analysis On Windows Servers with WhatsUp Flow Publisher](https://reader033.vdocuments.site/reader033/viewer/2022052410/5561e4b4d8b42ab1068b4cc1/html5/thumbnails/9.jpg)
9
Server Traffic Analysis Deployment
• Flow Publisher Server Agent– Windows Server
• 32 & 64 bit: Standard and Enterprise Server 2008 and Standard and Enterprise Server 2005 SP2
• Non-virtualized and virtualized servers
• Network interface
– Runs as a Windows service• Small resource footprint
Application and user traffic analysis at the source
![Page 10: Traffic Analysis On Windows Servers with WhatsUp Flow Publisher](https://reader033.vdocuments.site/reader033/viewer/2022052410/5561e4b4d8b42ab1068b4cc1/html5/thumbnails/10.jpg)
10 10
Server Based Flow MonitoringTechnical Demonstration
![Page 11: Traffic Analysis On Windows Servers with WhatsUp Flow Publisher](https://reader033.vdocuments.site/reader033/viewer/2022052410/5561e4b4d8b42ab1068b4cc1/html5/thumbnails/11.jpg)
11 11
Next Steps…
Find out more about Flow Publisher v1.0http://www.whatsupgold.com/whatsnew
Try - free 30 day evaluationhttp://www.whatsupgold.com/download
Buy – (3) ways to purchase www.whatsupgold.com/buy
1. WhatsUp Gold Representative2. An Ipswitch Reseller Partner of your choice3. Online via our ecommerce shop
Increased visibility into application and user trafficon your servers!
![Page 12: Traffic Analysis On Windows Servers with WhatsUp Flow Publisher](https://reader033.vdocuments.site/reader033/viewer/2022052410/5561e4b4d8b42ab1068b4cc1/html5/thumbnails/12.jpg)
12
Traffic Analysis How To Webinar Series
• Session 2 – 11:00 AM EST Tuesday, January 12, 2010 – Traffic Analysis for Non-flow Enabled Networks (Part 1)
• To understand single or multi-segment traffic patterns• To pinpoint origins of slow network performance in real-time
• Session 3 – 11:00 AM EST Tuesday, January 19, 2010– Traffic Analysis for Non-flow Enabled Networks (Part 2)
• To increase defense against internal and external threats • To provide cost effective traffic analysis without upgrades or downtime
• Session 4 – 11:00 AM EST Tuesday, January 26, 2010– Traffic Analysis Techniques for Flow and Non-flow Networks
• To optimize the power of flow-based traffic analysis in networks• To create valuable strategies to ensure future network stability and
security
![Page 13: Traffic Analysis On Windows Servers with WhatsUp Flow Publisher](https://reader033.vdocuments.site/reader033/viewer/2022052410/5561e4b4d8b42ab1068b4cc1/html5/thumbnails/13.jpg)
13
Flip over this…1 randomly selected attendee will receive a Flip Mino camcorder
![Page 14: Traffic Analysis On Windows Servers with WhatsUp Flow Publisher](https://reader033.vdocuments.site/reader033/viewer/2022052410/5561e4b4d8b42ab1068b4cc1/html5/thumbnails/14.jpg)
14 14
Q & APlease submit your questions
via the Q&A feature in the lower right corner
Additional Questions?
Jason Williams – [email protected] Gillis – [email protected]
orhttp://whatsupgold.com/community – then go to Forums
![Page 15: Traffic Analysis On Windows Servers with WhatsUp Flow Publisher](https://reader033.vdocuments.site/reader033/viewer/2022052410/5561e4b4d8b42ab1068b4cc1/html5/thumbnails/15.jpg)
15 15
Thank You