WhatsUp Flow Publisher
Network traffic monitoring and analysis
Flow monitoring for the whole network without changing your infrastructure
Flow Publisher’s unique ability to capture and process raw traffic information from non-flow enabled devices or host systems, combined with the powerful analysis capabilities of Flow Monitor deliver the following features:
Flow Publisher Basics
- Simple, software only solution that can be deployed on any current Windows operating system
- Capture of raw traffic flows from any of the following:
- Port mirroring (SPAN or RAP)
- Network Test Access Points (TAP)
- Directly on Windows server platforms
- Creates NetFlow v1, v5 or v9 compliant records from raw traffic
- Maps device MAC addresses to reported interfaces
- Provides options to log flows and commands
- ACL’s for access to administration and configuration
- Flow Publisher Management Console:
- Configuration and management of single or multiple agents
- Interface(s) from which to capture network traffic
- Mode and status for each interface in the probe (promiscuous or normal)
- Collector IP address to forward NetFlow records
- NetFlow version of flow data to send to a collector
- Local IP and port of the probe to forward flow records
- Active and Inactive timeout for flow record management
- SNMP index for the default input/output reported interface MAC Addresses to Interface indices mapping
Traffic Analysis and Monitoring / Troubleshooting Capabilities (in conjunction with Flow Monitor)
- Automatic classification of traffic by type and protocol in real-time
- Real-time identification of traffic flow patterns through the network
- Identification of traffic sources (top talkers) and destinations
- Identification of traffic destination by group, domain, top level domain (TLD), and country
- Pinpointing of internal and external traffic sources and destinations
- Conducting traffic identification and analysis for Quality of Service using ToS or DSCP
- Grouping of flow data based on common parameters, including IP addresses by domain, TLD or country
- Automatic identification of high traffic flows to un-monitored ports and highlighting of those ports as candidates for monitoring
- Uncovers unauthorized applications, including file and music sharing
- Detection of failed connections
Reporting (in conjunction with Flow Monitor)
- Access to over 40 flow management reports via WhatsUp Gold web and mobile access
- Automated rollup of flow data with hourly, daily, weekly, monthly and yearly views
- Displays flow information in custom formats
- Sorts and displays filtered reports by protocol, application, host, domain, TLD, country, groups or type of service
- Integration of flow reports with WhatsUp Gold workspace reports
- Access to WHOIS information for sender and receiver reports
- Display traffic information by bytes, packets or flows
Configuration and Management (in conjunction with Flow Monitor)
- Configuration of thresholds on multiple flow metrics via the Alert Center
- Configuration and management of flow data retention policies
- Configuration of flow logging levels
- Configurable support for non-standard ports and proprietary protocols
- Starting and stopping of flow services
- Setting of address resolution levels
- Access to flow database and service status, providing instant views of database parameters and running flow services
- Backup and restoration of flow database
- Apply custom names to flow interfaces
- Notification of database status