Installation instructions for NetFlow Auditor and supported Operating Systems

NetFlow Auditor Linux Installation Instructions

Overview
Thank you for downloading NetFlow Auditor, incorporating:

Real-Time - Real-time analytics for QoS, performance optimization, compliance and root-cause discovery.
Real-Time provides enhanced troubleshooting and forensic capabilities for today’s complex networks. NetFlow Auditor's real-time engine is also an intuitive intelligent agent that learns and builds a baseline of the traffic flows occurring on any network and can alert network management on bursts, scans and peer-to-peer (P2P) traffic. The level of granularity and the ability to drill into the traffic is unprecedented with every flow being stored for every minute for at least seven days.

Long-Term - Historical trending for capacity planning, traffic accounting and service level analysis.
Long-Term trending precessing provides a robust fully automated end-to-end Network knowledge base to enable you to baseline, plan and profile the use of any element within your network. Long-Term trending equips management with the knowledge to better understand IT resource and network usage enabling an organization to maximize operational efficiencies.

Notes
  • Distribution of this software in any shape or form is strictly prohibited!
  • This product has been tested on Windows, Centos 5.4 and RedHat Enterprise 5.
  • Subject to NetFlow Auditor (DigiToll) Licence and 3rd Party Terms and Conditions.

System Requirements
It is recommended that NetFlow Auditor be installed on a dedicated PC or server.

Flow Protocol
NetFlow v5, v7, or v9 or equivalent must be enabled. sFlow v2, jflow, netstream and IPFIX (Nortel) compliant.

Operating System
Windows XP/Vista (Standard Version Only)
Windows Server 2003 (R2 Standard)
Windows Server 2008
Centos Linux 5.x
Red Hat Linux Enterprise 5.x

Database Engine
MySQL - Provided with NetFlow Auditor Installation
Note that existing MySQL installations should be removed in order to install NetFlow Auditor!

Web Server
Apache Tomcat - Provided with DigiToll NetFlow Auditor Installation

Java
Java - Provided with DigiToll NetFlow Auditor Installation

Minimum Hardware (Recommended)
CPU - 2GHz (2 Cores for small environments, 4-8 Cores recommended for larger environments 8+ Cores for large Telco/Campus environments)
RAM - 2GB (4 GB recommended for larger environments on 32-bit 8+GB for 64 bit deployments)
HDD - 100GB for Professional, 20-50GB for Performance deployments
Ethernet Port

Front End
Mozilla / Internet Explorer
Sun Java JRE v1.6.18 or later - Get it here.

Linux
Installing NetFlow Auditor on a Linux O/S requires unique configurations to be defined during the operating system’s installation process. These configurations differ, depending on the operating system in use.

NetFlow Auditor
Once the Operating System is installed and configured and the system has rebooted, you can install the NetFlow Auditor Server on your Windows or Linux operating system.

The following instructions will take you step by step through the NetFlow Auditor installation process:

Linux Edition
To install NetFlow Auditor on your Linux O/S:

Enter the Linux O/S.

Image

You are prompted to enter a Password.

Type the password you defined during the Linux O/S installation.
[ENTER]
Type: cd /mnt

Image

If you have received NetFlow Auditor for Linux on a CD

[ENTER]
Type: mkdir cdrom
[ENTER]
Type: mount /dev /cdrom /mnt/cdrom
[ENTER]
Type: cd cdrom
[ENTER]

If you have downloaded NetFlow Auditor for Linux

Untar the package to a temporary directory

Type: install.sh
[ENTER]
The following is displayed:

Image

Type: 1
[ENTER]
NetFlow Auditor sometimes needs to make a change to the Linux configuration to enable the successful installation of MySQL. If NetFlow Auditor has made this change you will be prompted to reboot the server. Repeat steps 1-9 following the reboot.

Current installation NetFlow Auditor will configure UDP port 2055 and 9995 by default. After installation please setup your site config under Configuration->Administrator->Site Configuration.
You can configure SMTP Server, Report Email Sender Address, at any time after installation and add UDP ports from Configuration->Device->UDP Port.

Older installation processes of NetFlow Auditor, prompt for part or all the following information. These have been removed from the installation process to speed up installation. (Retained here for customers who still have older installation packages)

  • SMTP Server:
    This is the server address that is to be used for NetFlow Auditor email reporting and alerting functionality. If the NetFlow Auditor server has been configured as an SMTP server enter default [localhost] or the IP address of your SMTP server. (For NetFlow Auditor v3.6.7 and earlier versions only.)
  • NetFlow Auditor Report Sender Email Address:
    This is the email account that is to be used for sending email reports from the NetFlow Auditor server. Example netflowauditor@netflowauditor.domain.com. (For NetFlow Auditor v3.6.7 and earlier versions only.)
  • Enter the number of UDP ports required for NetFlow Collection:
    When configuring NetFlow Auditor for multiple NetFlow streams using Enterprise editions of NetFlow Auditor you must configure 1 port for each NetFlow stream. (For NetFlow Auditor Standard Version v3.5.10 and earlier.) Ports can now be changed from Configuration->Device->UDP Port.
  • Listening Port of NetFlow 1: [2055]
    Recommended default port 2055. (For NetFlow Auditor Standard Version v3.5.10 and earlier.) Ports can now be changed from Configuration->Device->UDP Port.
  • (Optional) Listening Port of NetFlow 2: [2056]
    Recommended default port 2056. For NetFlow Auditor Standard Version v3.5.10 and earlier.
(During the installation of NetFlow Auditor 3.6.8 and greater, You will not be asked to provide the information aforementioned.)

After the installation is completed, you will be prompted with a message 'NetFlow Auditor software was successfully installed.' Press Enter to go back to the menu.

Image

Type: x

[ENTER]
Acquire license keys from IdeaData. Registration links are available pre/post install. Completing registration will generate a license key to a valid email@domain. gmail, hotmail, yahoo and other such email domains will not be able to generate a license key.

NetFlow Auditor will not work until license keys have been obtained from IdeaData or one of its agents. Please register here for an evaluation license key.

Configuration (Linux)
The configuration menu enables access to further back-end configuration options. This menu applies only to NetFlow Auditor v3.6.7 or earlier. For NetFlow Auditor v3.6.8 and greater, many configuration are solely available in the Front End. To access the Configuration menu

Type: 3

[ENTER]
The following menu is displayed:

1 IP Address Configuration
2 NetFlow UDP Port
3 Email Configuration
4 Restart NetFlow Auditor
X Exit

IP Address Configuration
During installation NetFlow Auditor is configured with the IP Address of the server. However if the IP address is changed NetFlow Auditor needs to be reconfigured with the new IP address.

Type: 1

Enter new IP address

[ENTER]

NetFlow UDP Port
Enter the number of UDP ports required for NetFlow Collection:
When configuring NetFlow Auditor for multiple NetFlow streams on an Enterprise edition of NetFlow Auditor you must configure 1 port for each NetFlow stream.

Listening Port of NetFlow 1: [2055]
Recommended default port 2055

(Optional) Listening Port of NetFlow 2: [2056]
Recommended default port 2056

Email Configuration

SMTP Server:
This is the server address that is to be used for NetFlow Auditor email reporting and alerting functionality. If the NetFlow Auditor server has been configured as an SMTP server enter default [localhost] or the IP address of your SMTP server.

NetFlow Auditor Report Sender Email Address:
This is the email account that is to be used for sending email reports from the NetFlow Auditor server. Example report.netflowauditor@domain.com.

NetFlow Auditor Alarm Recipient Email Address:
This is the email account that is to be used for receiving email alarm from the NetFlow Auditor server. Example alert.netflowauditor@domain.com.

Restart NetFlow Auditor

See Getting Started

cron