Brasil +55 21 3211 2223 /  Australia +61 2 8211 0697 / info@telcomanager.com

TRAFip - FAQ

Q1. What operational systems are supported by TRAFip ?

Telcomanager's softwares run on an appliance called TelcoAppliance. There is no need to acquire additional hardware or operational systems to run TRAFip. The appliance has a CLI (command line interface) which is used to perform all configurations necessary to implement the system properly.

Top ▲

Q2. What is NetFlow ?

NetFlow is a protocol developed by Cisco which creates a cache in routers and switches memory's by analyzing the traffic, crossing those devices and inserting into the cache some information about the traffic, like:

  • source IP address
  • destination IP address
  • source TCP/UDP port
  • destination TCP/UDP port
  • ToS field
  • logical interface
  • layer 4 protocol

This information is called the flow keys, so if an IP packet crosses the router containing the same set of keys from an entry already in the cache, the cache entry data will be updated. The data stored for each cache entry is the number of bytes and packets. These information can be extremely valuable if it gets stored and treated by systems like TRAFip, which is able to present it in many different perspectives.

Nowadays, many different manufacturers like Juniper, Huawei, Enterasys and so on, have implemented NetFlow or similar protocols as a native feature of their routers and switches.

Telcomanager's softwares run on an appliance called TelcoAppliance. There is no need to acquire additional hardware or operational systems to run TRAFip. The appliance has a CLI (command line interface) which is used to perform all configurations necessary to implement the system properly. Know more about NetFlow by clicking here.

Top ▲

Q3. Can TRAFip automatically recognize new flow exporting devices ?

Yes. Once the device is exporting flows to TRAFip, you can access the System->Diagnostics->Exporters menu, where you can check a list of devices currently exporting flows towards TRAfip.

Top ▲

Q4. I have already configured a new application on TRAFip, but it is not appearing as a label of my application's graph applied on an interface group or subnet. What should I do ?

To appear in a profile that is associated to an interface group or subnet, the application must be first associated to the profile. To do that you should go to Configurations->Profiles, select the applications profile and associate the application to the profile.

Top ▲

Q5. How much additional traffic will NetFlow generate in my network once it is enabled in NetFlow exporting device and exporting flows to TRAFip ?

This really depends on the characteristics of your traffic, since NetFlow aggregates information based on some keys like source IP address, destination IP address, source TCP/UDP port and destination TCP/UDP port. So the more variation of those keys you have in your traffic, the higher the netflow traffic will be. From experience, in a typical enterprise network, the traffic on a network link usually increases between 1 to 5% due to NetFlow export traffic.

Top ▲

Q6. What is the impact on router's cpu when NetFlow is enabled ?

This depends on the characteristics of each manufacturer, but Cisco has made a document available with benchmarks for some of its devices. From experience we can say that if the device's cpu is not already overloaded, it is safe to enable NetFlow, since it usually represents an increment of 1 or 2% on CPU utilization. If the router's cpu is already presenting high cpu utilization, NetFlow sampled can be used instead.

Top ▲

Q7. Is TRAFip suitable to monitor traffic in MPLS networks ?

Yes, TRAFip is very handy when we talk about MPLS networks, because the system is able to receive NetFlow data from all network routers, filter duplicated traffic and present matrix traffic analysis between network locations.

Top ▲

Q8. For how long is TRAFip able to retain graph information and NetFlow record details ?

The Appliance is usually sized to store at least two years of processed data, which is used to build the graphs and some reports and 3 months of detailed flow records. But this really depends of the following factors:

  • 1 - The appliance's disk capacity, which can be verified at System-> Diagnostics->Storage menu.
  • 2 - The amount of generated data each day for each type of data. This can also be checked in the same menu.
  • 3 - The storage configuration for each database, which can be set at System->Parameters->Storage.

Top ▲

Q9. Is TRAFip able to generate QoS utilization reports ?

Yes. QoS analysis can be accomplished using the ToS (Type of Service) object available in TRAFip.

Top ▲

Q10. Is it possible to analyze server traffic with TRAFip ?

Yes, this analysis can be achieved by creating a subnet object with a 32 bit mask. Ex: 10.0.0.1/32. If you apply traffic profiles to this object, its traffic can be plotted in different perspectives, like application, destination and source locations, class of service and so on.

Top ▲

English