Telcomanager's softwares run on an appliance called TelcoAppliance. There is no need to acquire additional hardware or operational systems to run TRAFip. The appliance has a CLI (command line interface) which is used to perform all configurations necessary to implement the system properly.
NetFlow is a protocol developed by Cisco which creates a cache in routers and switches memory's by analyzing the traffic, crossing those devices and inserting into the cache some information about the traffic, like:
This information is called the flow keys, so if an IP packet crosses the router containing the same set of keys from an entry already in the cache, the cache entry data will be updated. The data stored for each cache entry is the number of bytes and packets. These information can be extremely valuable if it gets stored and treated by systems like TRAFip, which is able to present it in many different perspectives.
Nowadays, many different manufacturers like Juniper, Huawei, Enterasys and so on, have implemented NetFlow or similar protocols as a native feature of their routers and switches.
Telcomanager's softwares run on an appliance called TelcoAppliance. There is no need to acquire additional hardware or operational systems to run TRAFip. The appliance has a CLI (command line interface) which is used to perform all configurations necessary to implement the system properly. Know more about NetFlow by clicking here.
Yes. Once the device is exporting flows to TRAFip, you can access the System->Diagnostics->Exporters menu, where you can check a list of devices currently exporting flows towards TRAfip.
To appear in a profile that is associated to an interface group or subnet, the application must be first associated to the profile. To do that you should go to Configurations->Profiles, select the applications profile and associate the application to the profile.
This really depends on the characteristics of your traffic, since NetFlow aggregates information based on some keys like source IP address, destination IP address, source TCP/UDP port and destination TCP/UDP port. So the more variation of those keys you have in your traffic, the higher the netflow traffic will be. From experience, in a typical enterprise network, the traffic on a network link usually increases between 1 to 5% due to NetFlow export traffic.
This depends on the characteristics of each manufacturer, but Cisco has made a document available with benchmarks for some of its devices. From experience we can say that if the device's cpu is not already overloaded, it is safe to enable NetFlow, since it usually represents an increment of 1 or 2% on CPU utilization. If the router's cpu is already presenting high cpu utilization, NetFlow sampled can be used instead.
Yes, TRAFip is very handy when we talk about MPLS networks, because the system is able to receive NetFlow data from all network routers, filter duplicated traffic and present matrix traffic analysis between network locations.
The Appliance is usually sized to store at least two years of processed data, which is used to build the graphs and some reports and 3 months of detailed flow records. But this really depends of the following factors:
Yes. QoS analysis can be accomplished using the ToS (Type of Service) object available in TRAFip.
Yes, this analysis can be achieved by creating a subnet object with a 32 bit mask. Ex: 10.0.0.1/32. If you apply traffic profiles to this object, its traffic can be plotted in different perspectives, like application, destination and source locations, class of service and so on.