ADVANTECH Router App Net Flow Pfix
Cov ntaub ntawv khoom
Specifications
- Chaw tsim tshuaj paus: Advantech Czech koom pheej
- Chaw nyob: Sokolska 71, 562 04 Usti nad Orlici, Czech koom pheej
- Cov ntaub ntawv No.: APP-0085-EN
- Kev kho dua Hnub tim: 19 Lub Kaum Hli, 2023
Kev piav qhia ntawm Module
- NetFlow/IPFIX module yog ib lub router app tsim los ntawm Advantech Czech s.r.o. Nws tsis suav nrog tus qauv router firmware thiab yuav tsum tau muab tso rau nyias.
- Lub module yog tsim los saib xyuas kev sib txuas hauv network. Nws ua haujlwm los ntawm kev sau cov ntaub ntawv kev tsheb khiav IP siv qhov kev sojntsuam ntsia ntawm NetFlow-enabled routers.
- Cov ntaub ntawv no yog tom qab ntawd xa mus rau NetFlow tus neeg sau thiab tus neeg soj ntsuam rau kev tshuaj xyuas ntxiv.
Web Interface
Thaum lub module raug ntsia, koj tuaj yeem nkag mus rau nws web interface los ntawm txhaj rau lub npe module ntawm Router apps nplooj ntawv ntawm koj lub router web interface. Cov web interface muaj cov ntawv qhia zaub mov nrog ntau ntu:
Kev teeb tsa
Ntu Configuration tso cai rau koj los teeb tsa ntau qhov chaw ntawm NetFlow / IPFIX router app. Txhawm rau nkag mus rau qhov teeb tsa kev teeb tsa, nyem rau ntawm "Ntiaj Teb" yam khoom hauv cov ntawv qhia zaub mov tseem ceeb ntawm lub module web interface. Cov khoom configurable muaj xws li:
- Enable Probe: Qhov kev xaiv no pib xa cov ntaub ntawv NetFlow mus rau cov chaw khaws khoom nyob deb (yog tias txhais) lossis rau tus neeg sau hauv zos (yog tias qhib).
- Raws tu qauv: Qhov kev xaiv no tso cai rau koj xaiv cov txheej txheem los siv rau NetFlow cov ntaub ntawv xa tawm. Koj tuaj yeem xaiv los ntawm NetFlow v5, NetFlow v9, lossis IPFIX (NetFlow v10).
- Cav ID: Qhov kev xaiv no tso cai rau koj los teeb tsa Tus Saib Xyuas Domain ID (rau IPFIX), Qhov Chaw ID (rau NetFlow v9), lossis Cav ID (rau NetFlow v5). Qhov no pab tus neeg sau kom paub qhov txawv ntawm ntau tus neeg xa khoom. Yog xav paub ntxiv, saib mus rau ntu ntawm Cav ID Interoperability.
Cov ntaub ntawv
Cov ntaub ntawv seem muab cov ntsiab lus hais txog lub module thiab nws cov ntawv tso cai. Koj tuaj yeem nkag mus rau ntu no los ntawm nyem rau ntawm "Cov Ntaub Ntawv" cov khoom hauv cov ntawv qhia zaub mov tseem ceeb ntawm cov module web interface.
Cov lus qhia siv
Cov ntaub ntawv khaws tseg
- NetFlow/IPFIX module sau IP cov ntaub ntawv tsheb khiav los ntawm router qhov kev sojntsuam. Qhov no suav nrog cov ntsiab lus xws li qhov chaw thiab chaw nyob IP chaw nyob, suav pob ntawv, suav byte, thiab cov ntaub ntawv raws tu qauv.
Kev muab cov ntaub ntawv khaws cia
- Txhawm rau khaws cov ntaub ntawv khaws cia, koj yuav tsum nkag mus rau NetFlow cov khoom sau thiab cov tshuaj ntsuam xyuas uas lub module xa cov ntaub ntawv. Tus neeg sau thiab tus neeg soj ntsuam yuav muab cov cuab yeej thiab cov ntawv ceeb toom rau kev txheeb xyuas thiab pom cov ntaub ntawv khaws tseg.
Cav ID Interoperability
- Lub cav ID qhov chaw nyob rau hauv lub configuration tso cai rau koj mus qhia ib tug tshwj xeeb identifier rau koj exporter. Qhov no muaj txiaj ntsig zoo thaum koj muaj ntau tus neeg xa khoom xa cov ntaub ntawv mus rau tib tus neeg sau khoom.
- Los ntawm kev teeb tsa txawv Cav IDs, tus neeg sau tuaj yeem sib txawv ntawm cov ntaub ntawv tau txais los ntawm cov neeg xa khoom sib txawv.
Tsheb thauj mus los
- Lub module tsis muab cov ntaub ntawv tshwj xeeb txog kev caij tsheb khiav. Thov xa mus rau cov ntaub ntawv ntsig txog lossis hu rau Advantech Czech s.r.o. kom paub meej ntxiv.
Cov ntaub ntawv ntsig txog
- Yog xav paub ntxiv thiab cov lus qhia ntxaws, thov mus saib cov ntaub ntawv hauv qab no:
- Configuration Manual
- Lwm cov ntaub ntawv ntsig txog muab los ntawm Advantech Czech s.r.o.
FAQ
Q: Leej twg yog tus tsim khoom ntawm NetFlow / IPFIX?
- A: Cov chaw tsim khoom ntawm NetFlow / IPFIX yog Advantech Czech s.r.o.
Q: Lub hom phiaj ntawm NetFlow / IPFIX yog dab tsi?
- A: NetFlow/IPFIX yog tsim los saib xyuas cov tsheb khiav hauv lub network los ntawm kev sau cov ntaub ntawv tsheb khiav IP los ntawm NetFlow-enabled routers thiab xa mus rau NetFlow collector thiab analyzer.
Q: Kuv tuaj yeem nkag mus rau qhov kev teeb tsa ntawm lub module li cas?
- A: Txhawm rau nkag mus rau qhov teeb tsa kev teeb tsa, nyem rau ntawm "Ntiaj Teb" yam khoom hauv cov ntawv qhia zaub mov tseem ceeb ntawm lub module web interface.
Q: Lub Cav ID yog siv rau dab tsi?
- A: Lub Cav ID qhov chaw tso cai rau koj los qhia txog tus cim tshwj xeeb rau koj tus neeg xa khoom, pab tus neeg sau kom paub qhov txawv ntawm ntau tus neeg xa tawm.
- Khoos phis tawj thev naus laus zis © Copyright 2023 Advantech Czech sro Tsis muaj ib feem ntawm qhov kev tshaj tawm no yuav raug muab luam tawm lossis xa tawm hauv ib daim ntawv lossis los ntawm ib qho twg, hluav taws xob lossis tshuab, suav nrog kev yees duab, kaw, lossis ib qho kev khaws cia thiab khaws cov ntaub ntawv yam tsis tau sau ntawv tso cai.
- Cov ntaub ntawv hauv phau ntawv no yuav raug hloov pauv yam tsis tau ceeb toom, thiab nws tsis sawv cev rau kev cog lus ntawm Advantech.
- Advantech Czech sro yuav tsis raug txim rau qhov xwm txheej lossis kev puas tsuaj uas tshwm sim los ntawm cov khoom vaj khoom tsev, kev ua haujlwm, lossis kev siv phau ntawv no.
- Tag nrho cov npe khoom siv hauv phau ntawv no yog cov npe lag luam ntawm lawv cov tswv. Kev siv cov cim lag luam lossis lwm cov npe hauv cov ntawv tshaj tawm no tsuas yog siv rau kev siv thiab tsis suav nrog kev pom zoo los ntawm tus tswv lag luam.
Siv cov cim
Kev phom sij - Cov ntaub ntawv hais txog cov neeg siv kev nyab xeeb lossis kev puas tsuaj rau lub router.
Nco ntsoov - Cov teeb meem uas tuaj yeem tshwm sim hauv cov xwm txheej tshwj xeeb.
Cov ntaub ntawv - Cov lus qhia muaj txiaj ntsig lossis cov ntaub ntawv muaj txiaj ntsig tshwj xeeb.
Example - Example of function, command or script.
Changelog
NetFlow/IPFIX Changelog
- v1.0.0 (2020-04-15)
- Thawj tso.
- v1.1.0 (2020-10-01)
- Hloov kho CSS thiab HTML code kom phim firmware 6.2.0+.
Kev piav qhia ntawm module
- Router app NetFlow/IPFIX tsis muaj nyob rau hauv tus qauv router firmware. Uploading ntawm no router app yog piav nyob rau hauv Configuration phau ntawv (saib Tshooj Cov Ntaub Ntawv).
- Router app NetFlow / IPFIX yog txiav txim siab los saib xyuas kev sib txuas hauv network. NetFlow enabled routers muaj ib qho kev sojntsuam uas sau cov ntaub ntawv tsheb khiav IP thiab xa lawv mus rau NetFlow sau thiab ntsuas.
Qhov no router app muaj:
- NetFlow sojntsuam uas tuaj yeem xa cov ntaub ntawv mus rau Network collector thiab analyzer, e. g. tus http://www.paessler.com/prtg.
- NetFlow collector uas khaws cov ntaub ntawv khaws tseg rau a file. Nws tseem tuaj yeem tau txais thiab khaws NetFlow tsheb los ntawm lwm yam khoom siv.
Web Interface
- Thaum lub installation ntawm lub module tiav, lub module GUI tuaj yeem raug hu los ntawm txhaj rau lub npe module ntawm Router apps nplooj ntawv ntawm router's. web interface.
- Sab laug ntawm GUI no muaj cov ntawv qhia zaub mov nrog Configuration menu section thiab Information menu section.
- Customization menu seem tsuas muaj cov khoom xa rov qab, uas hloov rov qab los ntawm module's web nplooj ntawv rau lub router web nplooj ntawv configuration. Cov ntawv qhia zaub mov tseem ceeb ntawm module's GUI yog pom ntawm daim duab 2.
Kev teeb tsa
Ntiaj teb no
- Tag nrho NetFlow / IPFIX router app teeb tsa tuaj yeem teeb tsa los ntawm txhaj rau ntawm cov khoom thoob ntiaj teb hauv cov ntawv qhia zaub mov tseem ceeb ntawm module web interface. Ib tshajview ntawm cov khoom configurable yog muab hauv qab no.
Yam khoom | Kev piav qhia |
Qhib kev sojntsuam | Pib xa cov ntaub ntawv NetFlow mus rau Tus Neeg Sau Chaw Taws Teeb (thaum tau hais tseg), lossis mus rau Tus Sau Npe Hauv Zos (thaum ua tiav). |
raws tu qauv | Txoj cai yuav siv: NetFlow v5, Netflow v9, IPFIX (Net-Flow v10) |
Cav ID | Observation Domain ID (ntawm IPFIX, Source Id ntawm NetFlow v9, lossis Cav ID ntawm NetFlow v5) tus nqi. Qhov no tuaj yeem pab koj tus neeg sau khoom kom paub qhov txawv ntawm ntau tus neeg xa khoom. Saib cov ntu ntawm Engine ID Interoperability. |
Yam khoom | Kev piav qhia |
Sampua ler | (tsis muaj): xa txhua qhov kev pom zoo; kev txiav txim siab: xa txhua N-th pom ntws; random: xaiv random ib ntawm N ntws; hash: xaiv hash-randomly ib qho ntawm N ntws. |
Samplis Rate | Tus nqi ntawm N. |
Lub Sijhawm Kev Ua Haujlwm Tsis Ua Haujlwm | Xa dej tom qab nws tsis ua haujlwm rau 15 vib nas this. Default tus nqi yog 15. |
Active Traffic Timeout | Xa ntws tom qab nws ua haujlwm rau 1800 vib nas this (30 feeb). Default tus nqi yog 1800. Saib cov nqe lus ntawm lub sij hawm khiav tsheb. |
Chaw Sau Ntawv | IP chaw nyob ntawm NetFlow collector lossis analyzer, qhov twg yuav xa cov ntaub ntawv NetFlow sau. Chaw nres nkoj yog xaiv tau, default 2055. Detination tuaj yeem muaj cov npe sib cais ntawm ntau tus IP chaw nyob (thiab cov chaw nres nkoj) los tsom iav NetFlow rau ob lossis ntau tus neeg sau khoom / tshuaj ntsuam xyuas. |
Pab kom Local Collector | Pib tau txais NetFlow cov ntaub ntawv los ntawm kev sojntsuam hauv zos (thaum qhib) lossis los ntawm kev sojntsuam tej thaj chaw deb. |
Cia Lub Sij Hawm | Qhia lub sij hawm ncua hauv vib nas this los tig files. Tus nqi pib yog 300s (5min). |
Kev Cia Siab | Teem lub sijhawm max lub neej rau files hauv phau ntawv qhia. Tus nqi ntawm 0 disables max lifetime txwv. |
Khw Interface SNMP Tus lej | Kos khaws SNMP Performance index ntawm input / output interface (% hauv, % tawm) ntxiv rau cov txheej txheem cov ntaub ntawv, saib hauv qab no. |
Khaws Tus IP Chaw Nyob Tom ntej | Kos rau khaws IP chaw nyob ntawm lub hop tom ntej ntawm cov tsheb khiav tawm (% nh). |
Khw Exporting IP Chaw Nyob | Xyuas kom khaws IP chaw nyob ntawm tus xa tawm router (%ra). |
Khw Exporting Engine ID | Xyuas kom khaws Cav ID ntawm lub router exporting (%eng). |
Lub Sijhawm Txais Txais Lub Khw Muag Khoom | Tshawb xyuas kom khaws lub sijhawmamp thaum cov ntaub ntawv ntws tau txais (% tr). |
Table 1: Configuration khoom piav qhia
Cov ntaub ntawv
licences Summarys Open-Source Software (OSS) cov ntawv tso cai siv los ntawm cov qauv no
Cov lus qhia siv
Cov ntaub ntawv NetFlow yuav tsum tsis txhob xa hla WAN, tshwj tsis yog siv VPN. Cov ntaub ntawv tsis yog nyob rau hauv encrypted los yog obfuscated, yog li tus neeg tsis tau tso cai yuav cuam tshuam thiab view cov ntaub ntawv.
Cov ntaub ntawv khaws tseg
Cov txheej txheem hauv qab no yog ib txwm xa los ntawm kev sojntsuam thiab khaws cia los ntawm tus neeg sau:
- Sijhawmamp thaum lub tsheb tau pom thawj zaug (%ts) thiab pom kawg (%te), siv lub moos ntawm kev sojntsuam
- Tus lej bytes (%byt) thiab pob ntawv (%pkt)
- Cov txheej txheem siv (% pr)
- TOS (%tos)
- TCP chij (%flg)
- Qhov chaw IP chaw (%sa, %sap) thiab chaw nres nkoj (%sp)
- Qhov chaw IP chaw nyob (%da, %dap) thiab chaw nres nkoj (%dp)
- ICMP hom (% nws)
Cov hauv qab no kuj raug xa mus, tab sis khaws cia tsuas yog thaum thov (saib config saum toj no):
- SNMP Performance index ntawm cov tswv yim / tso zis interface (% hauv, % tawm)
- IP chaw nyob ntawm lub hop tom ntej ntawm cov tsheb khiav tawm (% nh)
- IP chaw nyob (%ra) thiab Cav ID (%eng) ntawm lub router xa tawm (kev sojntsuam)
- Sijhawmamp thaum cov ntaub ntawv ntws tau txais (% tr), siv lub moos ntawm tus sau
- Tus nqi hauv brackets (% xx) qhia tias tus formatter siv nrog nfdump los tso saib tus nqi no (saib tshooj tom ntej).
Kev muab cov ntaub ntawv khaws cia
- Cov ntaub ntawv khaws cia hauv /tmp/netflow/nfcapd.yyyymmddHHMM, qhov twg yyyymmddHHMM yog lub sijhawm tsim. Cov npe tseem suav nrog .nfstat file, uas yog siv los saib xyuas lub sijhawm tas sijhawm.
- Tsis txhob hloov qhov no file. Txhawm rau teeb tsa lub sijhawm tas sijhawm siv admin GUI.
- Cov files tuaj yeem nyeem tau siv nfdump hais kom ua. nfdump [options] [filter]
Qhia UDP pob ntawv xa los ntawm 192.168.88.100:
- nfdump -r nfcapd.202006011625 'proto udp thiab src ip 192.168.88.100'
- Tso saib tag nrho cov ntws ntawm 16:25 thiab 17:25, aggregating bidirectional flows (-B):
- nfdump -R /tmp/netflow/nfcapd.202006011625:nfcapd.202006011725 -B
- Zaub Cav Hom / ID, qhov chaw nyob + chaw nres nkoj thiab chaw nyob chaw nyob + por rau txhua qhov ntws:
- nfdump -r /tmp/netflow/nfcapd.202006011625 -o "fmt:%eng %sap %dap"
Cav ID Interoperability
- Netflow v5 txhais ob lub cim 8-ntsis: Cav Hom thiab Cav ID. Kev soj ntsuam ntawm Advantech routers xa tsuas yog Cav ID (0..255). Lub Cav Hom yuav ib txwm yog xoom (0). Li no, qhov ntws xa nrog Cav ID = 513 (0x201) yuav tau txais raws li Cav Hom / ID = 0/1.
- Netflow v9 txhais ib tus cim 32-ntsis. Kev sojntsuam ntawm Advantech routers tuaj yeem xa txhua tus lej 32-ntsis, yuav ua li cas-ua li cas lwm cov tuam txhab (xws li Cisco) faib cov cim rau hauv ob lub cim tseg, ua raws li Cav Hom thiab Cav ID. Lub receiver ua raws li tib txoj kev.
- Li no, qhov ntws xa nrog Cav ID = 513 (0x201) yuav tau txais raws li Cav Hom / ID = 2/1.
- IPFIX txhais ib tus cim 32-ntsis. Kev sojntsuam ntawm Advantech routers tuaj yeem xa tus lej 32-ntsis, tab sis tus neeg sau hauv zos tseem tsis tau khaws cov nqi no. Li no txhua qhov ntws yuav tau txais raws li Cav Hom / ID = 0/0.
- Kev pom zoo: Yog tias koj xav khaws Engine ID hauv cov neeg sau khoom hauv zos, tshawb xyuas Khw Muag Khoom Exporting Engine ID hauv kev teeb tsa, siv Engine ID < 256 thiab tsis txhob siv IPFIX raws tu qauv.
- Tsheb thauj mus los
- Kev sojntsuam xa tawm tag nrho cov ntws, piv txwv li txhua pob ntawv uas koom ua ke. Yog tias tsis muaj pob ntawv raug pom zoo rau ib lub sijhawm (Inactive Traffic Timeout), qhov ntws yog suav tias yog tiav thiab qhov kev sojntsuam xa cov ntaub ntawv tsheb mus rau tus neeg sau.
- Cov ntaub ntawv hais txog a file kev hloov pauv yuav tshwm sim hauv tus neeg sau thaum hloov pauv tiav, uas yuav siv sijhawm ntau heev. Yog tias qhov kev sib kis tau ua haujlwm ntev dhau lawm (Active Traffic Timeout) nws yuav tshwm sim raws li ntau qhov luv luv.
- Rau example, nrog rau 30 feeb kev khiav tsheb khiav sijhawm, kev sib txuas lus 45 feeb yuav qhia tau tias yog ob qhov dej ntws: ib qho 30 feeb thiab ib qho 15 feeb.
Tsheb thauj mus los
- Kev sojntsuam xa tawm tag nrho cov ntws, piv txwv li txhua pob ntawv uas koom ua ke. Yog tias tsis muaj pob ntawv raug pom zoo rau ib lub sijhawm (Inactive Traffic Timeout), qhov ntws yog suav tias yog tiav thiab qhov kev sojntsuam xa cov ntaub ntawv tsheb mus rau tus neeg sau.
- Cov ntaub ntawv hais txog a file kev hloov pauv yuav tshwm sim hauv tus neeg sau thaum hloov pauv tiav, uas yuav siv sijhawm ntau heev. Yog tias qhov kev sib kis tau ua haujlwm ntev dhau lawm (Active Traffic Timeout) nws yuav tshwm sim raws li ntau qhov luv luv. Rau example, nrog rau 30 feeb kev khiav tsheb khiav sijhawm, kev sib txuas lus 45 feeb yuav qhia tau tias yog ob qhov dej ntws: ib qho 30 feeb thiab ib qho 15 feeb.
- Koj tuaj yeem tau txais cov ntaub ntawv hais txog cov khoom lag luam ntawm Engineering Portal ntawm icr.advantech.cz chaw nyob.
- Txhawm rau kom tau txais koj lub router Txoj Kev Qhia Pib Ceev, Tus Neeg Siv Phau Ntawv Qhia, Kev Qhia Txog Kev Teeb Meem, lossis Firmware mus rau nplooj ntawv Router Models, nrhiav tus qauv xav tau, thiab hloov mus rau Phau Ntawv Qhia lossis Firmware tab, feem.
- Router Apps installation pob thiab phau ntawv muaj nyob rau ntawm Router Apps nplooj.
- Rau Cov Ntaub Ntawv Kev Txhim Kho, mus rau nplooj ntawv DevZone.
Cov ntaub ntawv / Cov ntaub ntawv
![]() |
ADVANTECH Router App Net Flow Pfix [ua pdf] Cov neeg siv phau ntawv qhia Router App Net Flow Pfix, App Net Flow Pfix, Net Flow Pfix, Flow Pfix, Pfix |