Network Device Monitor for NetFlow Standard

Thanks For Downloading!

Review the documentation below and follow any custom installation steps. If no install steps are listed, most Splunk Apps and Add-ons can be installed as follows:

Windows: Decompress the downloaded file using a tool like 7-Zip and place the resulting folder into %PROGRAMFILES%\Splunk\etc\apps. Then restart Splunk using the splunk restart command or the GUI.

Unix/Linux: Decompress the downloaded file using a tool like tar -xvf and place the resulting folder into $SPLUNK_HOME/etc/apps. Then restart Splunk using the splunk restart command or the GUI.

The Network Device Monitor App for Splunk provides real time visibility into your network devices.

This app allows you to view the number of bytes and packets by interface pairs by protocol passing through each NetFlow exporter during a selected time period. It also shows the average packet size per interface pair, where an unexpected drop in packet size (packet fragmentation) could be an indication of a problem on the network or an attack.

You need to have NetFlow Integrator Standard software to feed data into this app.
NetFlow Integrator translates NetFlow to syslog in in real-time. It can consolidate NetFlow records, reducing the volume by 1000 times or more, thus making it practical for indexing and correlation with other machine data in Splunk.

Download your Free 30 Day Trial of NetFlow Integrator Standard Today!

Features

• Overview
  • Top 10 Devices by Traffic (MB)
  • Top 10 Devices by Packet Rate (packets / second)
• Exporter Details
  • Search by Exporter
  • Top 10 Interface Pairs by Traffic
  • Top 10 Interface Pairs by Packet Rate
  • Top 10 Destination Ports by Traffic
  • Top 10 Destination Ports by Packet Rate
• Search by Destination Port
  • Search by Exporter / Destination Port
  • Destination Port Top 10 Interface Pairs (MB)
  • Destination Port Top 10 Interface Pairs (packets / second)
• Search by Interface Pair
  • Search by Exporter / Input snmp / Output snmp
  • Input snmp Output snmp Top 10 Destination ports (MB)
  • Input snmp Output snmp Top 10 Destination ports (bytes / packets)
  • Input snmp Output snmp Top 10 Destination ports (packets / second)
• Average Packet Size
  • Search by Exporter
  • Average packet size per interface pair (bytes)

Requirements

• NetFlow v5, v9
• NetFlow Integrator Standard Edition
• Splunk UDP Data Input 10514 Source type=flowintegrator