Scrutinizer Guide

Scrutinizer Getting Started Guide
Scrutinizer
Getting Started Guide
A message from Plixer International:

Thank you for taking the time to download and install
Scrutinizer. We believe that Scrutinizer is a useful tool for
any Network industry professional.
Our goal when developing Scrutinizer was to make
everything from installation to operation to removal as easy
as possible. We feel that we have succeeded. However, if
you struggle at any point, we strongly encourage you to
contact the support team at Plixer or that of your local
distributor. You can even post your questions or findings to
our forum. Someone will always be available to help.
Again, we thank you for supporting Plixer and our products,
and hope to hear any feedback you might have after using
Scrutinizer.
Sincerely,
The Plixer International Team
Plixer International, Inc.
Table of Contents
1. Intro to NetFlow
a. What is NetFlow? ..... 3
b. What Devices support NetFlow?................................................ 3
i. Cisco Routers ........... 3
ii. Catalyst Switches ......4
iii. Other Vendors ... 4
2. Getting Started
a. Configuring your routers to send NetFlow to Scrutinizer 5
b. Product Installation ... 6
3. Using Scrutinizer
a. Launching Scrutinizer for the first time .. 9
b. Scrutinizer Status Screen Tips . 11
Intro to NetFlow
What is NetFlow?
NetFlow is a open (but proprietary) protocol used for collecting network traffic
information, which was developed by Cisco Systems, Inc.
NetFlow enabled devices, which include Cisco routers and switches (as well as
switches and routers made by other supporting vendors) generate records, which
are sent from the router in UDP packets. A NetFlow collector must then collect
these packets as they stream from the router.
Some of the information that NetFlow provides is:
What is the originating IP address, as well as destination IP of a

conversation between network devices.
When a specific network conversation ended and how long it was.
How much traffic was generated by a conversation.
The information provided by NetFlow, can then be organized and stored by a

software package (in this case Scrutinizer) for later analysis, or even real-time as
conversations end. With NetFlows information displayed in properly in such a
manner Network Administrators can quickly have answers to the following
questions:
Who is the end system causing the traffic?

What is the application/protocol being used?
When was the traffic was occurring?
Where is the network connection being affected?
One thing to keep in mind is that routers will only send the information pertaining
to a given conversation after it has ended. However, NetFlow does allow for
routers to summarize conversation in user defined intervals to make the
information stream more accurately.
What devices support NetFlow?

Cisco Routers:
Use the chart below to determine if your routers are capable of sending NetFlow
information to Scrutinizer. Just locate your IOS release and see if your router
model is listed.
Cisco IOS release Models

11.1CA, 11.1CC
Cisco: 7200 and 7500 series
RSP: 7200 series
12.0
Cisco: 1720, 2600, 3600, 4500, 4700, AS5800
RSP: 7000 and 7200 series
uBR: 7200 and 7500 series
RSM series
12.0T, 12.0S
Cisco: 1720, 2600, 3600, 4500, 4700, AS5800
RSM series, MGX8800RPM series & BPx8600 series
12.0(3)T, 12.0(3)S Cisco: 1720, 2600, 3600, 4500, 4700, AS5300,
AS5800
12.0(4)T
Cisco: 1400, 1600, 1720, 2500, 2600, 3600, 4500,
4700, AS5300, AS5800
12.0(4)XE
Cisco: 7100 series
12.0(6)S
Cisco: 12000 series
NetFlow is also supported by these Catalyst series switches: 45xx, 55xx, 6xxx
Cisco Switches:
NetFlow Exports are also supported on other Cisco switches when using a
NetFlow Feature Card (NFFC) or NFFC II and the Route Switch Module (RSM),
or Route Switch Feature Card (RSFC). However, you may need to check
whether version 5 is supported, as some switches talk in version 7 by default.
NetFlow is still a fairly new technology. However, demand for NetFlow support
has grown exponentially over the last few years, as more and more vendors are
realizing the benefits of the information that is provided by NetFlow.
Other Vendors:
Here are a few of the major vendors that now support NetFlow:
Alcatel
Enterasys
Foundry
Juniper
Getting Started
Configuring your Routers to send NetFlow to Scrutinizer.
The beauty of NetFlow is that when using a supported router or switch, you
simply need to telnet to each device and turn NetFlow on. There should never be
a need to install any additional software or hardware if the device is compatible.
Once you have an open telnet session with your router or switch, please enter
the "quick setup" commands listed below (where #ip = the IP address of your
Scrutinizer server):
(config-if)#ip route-cache flow
You also need to enter the following global commands:
(config)#ip flow-export source <interface number>
(config)#ip flow-export version 5 peer-as
(config)#ip flow-export destination<ip address> <port number>
Use the commands below to enable NetFlow on each interface you are
interested in collecting a flow from (i.e. not VLANs and Tunnels, as they are auto
included). This will normally be an Ethernet or WAN interface. You may also
need to set the speed of the interface in kilobits per second. It is especially
important to set the speed for frame relay or ATM virtual circuits.
Command to type: interface <interface>
Command to type: ip route-cache flow
Command to type: bandwidth
To make sure you are getting the most up-to-date information on how to correctly
configure your existing routers to work with Scrutinizer, and for a more detailed
list of optional commands, please visit the following link:
http://www.plixer.com/products/scrutinizer_activate-netflow.php
The Product Installation Process

First, if you have not already downloaded the installation executable, you may do
so here: http://www.plixer.com/support/download_request.php.
Launch the Install Program:
Once you have successfully downloaded the plixer-scrutinizer-win32.exe file

to a local directory, click the install icon to launch the Scrutinizer Installation.

Scrutinizer does not actively poll for SNMP. However, by adding a default
community string, Scrutinizer can later retrieve SNMP details from routers, as
needed; in order to supplement the information provided by NetFlow for
additional features and device details.
As noted in the above screenshot, to activate a commercial copy of Scrutinizer,
you can enter the License Key that was provided at the time of purchase. If a key
is not provided at this time, one can be entered later within the Scrutinizer
settings. If you do not have a valid License Key and are interested in purchasing
one, visit the link below:
http://www.plixer.com/products/purchasing.php
If you are planning to use the free version of Scrutinizer (which is limited to 1
router/ unlimited interfaces and lacks some functionality found in the commercial
versions, such as real-time statistics), then simply leave the License field blank.
Using Scrutinizer
Launching Scrutinizer for the first time.
After the install has finished, double-click the newly created shortcut located on
the desktop. This will launch Scrutinizer in the default web browser.
The first screen that appears is the Scrutinizer Log In screen. To protect the
sensitive network information found in Scrutinizer, authentication is always
enabled and a password must be entered to view the user interface.
At first log in, a User Name and Password of admin/admin must be entered. This
should be changed to a more secure alternative as soon as possible.

For more information on managing user accounts and passwords, please
reference the Scrutinizer Product Manual, which can be accessed by clicking the
icon in the upper right hand corner of any screen.
An online version of the Scrutinizer Product Manual can be found at:
http://www.plixer.com/manual/index.html.
Assuming that your routers are configured correctly, you will be directed to the
status screen, where you will start receiving flows.
If Scrutinizer is not receiving NetFlow, it will direct you to the MANAGE

NETFLOWS screen. Scrutinizer is smart enough to recognize incoming NetFlow
from any number of routers or switches without any kind of configuration within
the product.
10
If you are directed to this page, please refer to the configuring NetFlow section of
this guide, configure your routers, and click Check Again.
The only thing left to do is wait for the NetFlow data.
Scrutinizer Status Screen Tips

Below is a quick look at some of the functionality found on the Scrutinizer Status
Page.
Your Scrutinizer NetFlow Analyzer should now be fully operational and displaying
the information you are looking for. Hopefully this Quick Start Guide was useful
in helping to get Scrutinizer up and running quickly.
For a more detailed reference, the user manual can be accessed by clicking on
the
icon in the upper right hand corner. Accessing the product manual in this
manner is highly recommended, as the product help is context sensitive to the
page currently being viewed.
An up-to-date online version of the Scrutinizer Product Manual can be found at:
http://www.plixer.com/manual/index.html.
11

Scrutinizer Guide

Uploaded by

Copyright:

Available Formats

Scrutinizer Guide

Uploaded by

Document Information

Original Description:

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Scrutinizer Guide

Uploaded by

Copyright:

Available Formats

Scrutinizer Getting Started Guide

A message from Plixer International:

Plixer International, Inc.

Scrutinizer Getting Started Guide

Plixer International, Inc.

Scrutinizer Getting Started Guide

What is the originating IP address, as well as destination IP of a

The information provided by NetFlow, can then be organized and stored by a

Who is the end system causing the traffic?

What devices support NetFlow?

Plixer International, Inc.

Scrutinizer Getting Started Guide

Cisco IOS release Models

Plixer International, Inc.

Scrutinizer Getting Started Guide

Plixer International, Inc.

Scrutinizer Getting Started Guide

The Product Installation Process

Launch the Install Program:

Once you have successfully downloaded the plixer-scrutinizer-win32.exe file

Plixer International, Inc.

Scrutinizer Getting Started Guide

Plixer International, Inc.

Scrutinizer Getting Started Guide

Plixer International, Inc.

Scrutinizer Getting Started Guide

Plixer International, Inc.

Scrutinizer Getting Started Guide

If Scrutinizer is not receiving NetFlow, it will direct you to the MANAGE

Plixer International, Inc.

Scrutinizer Getting Started Guide

Scrutinizer Status Screen Tips

Plixer International, Inc.

You might also like