License Key Registration

Please register now for free support during your NetFlow Auditor installation.

 
* = required field
  
Please check all that apply:
Visibility Compliance Anomaly Detection
Forensics Security Root Cause Analysis
Baselining Trending Billing (95th%tile/ Usage)

How did you hear about NetFlow Auditor?

Installation

Please install on Windows Server or Redhat / Centos 5.x. Pre 5.x supported email with upgrades from 3.7.1 email for support.

To ensure a successful installation please uninstall any other NetFlow software to ensure that no conflicts occur. Please uninstall any previous installations of MySQL and Apache Tomcat. Once you are collecting flows please watch the overview videos and setup sometime for a brief demo and training that will fast track you to real visibility. During evaluation the video help screen will be the default landing page. A commercial license will default to the overview interface utilization page below.

Join our NetFlow Network Auditing Forensics and Security Community

NOTE: After installing NetFlow Auditor please use "Username: Administrator and Password: adminpass" to login and follow the prompts.




Once the license is active the menu set will appear.

Send your flows from your devices to NetFlow Auditor and they will be automatically identified. Once identified, click each line and put in snmp read community string for the device.



Overview screen will take a few minutes to collate information before starting


License Key installation

The License key can be inserted using the license management screen (Configuration -> Administation -> License) or copied into the keyblocks directory as described below.

Click "Load" then Browse to select your license key. Press "Confirm" to Insert it.



Alternatively, please copy the license key to your "keyblocks" directory and restart NetFlow Auditor. The keyblocks directory can be found in /DigiToll/digiTolBE/keyblocks for Windows systems and /digitoll/keyblocks/digitoll/ for Linux QuickStart

  • In environments with many flows, it is always advisable to use sampling on the routing/switching device and to set the corresponding sampling ratio in NetFlow Auditor.
  • Previous installations of other software that uses MySQL, Apache Tomcat and Java may impact on a successful NetFlow Auditor deployment please uninstall MySQL, Apache Tomcat, Java and Auditor and reinstall NetFlow Auditor.
  • Once the license is active the left menu set will appear.
  • Send NetFlow to NetFlow Auditor on default port 2055 0r 9995 and they will be automatically identified. Alternatively, add or change the UDP Port under the Configuration -> Devices -> UDP Port.
  • After the devices have been identified, enter in snmp read community string for the device by modifying the snmp config Configuration -> Devices
  • The overview screen will take a few minutes to collate information before reporting
  • See the Getting Started guide for additional help.

NetFlow Auditor Features and Benefits

NetFlow Auditor provides visibility of every network conversation and scales beyond any other product in the industry.


Automated Scheduled Reports and Alerting

  • Custom NetFlow Reports can be saved as a Drilldown Template, or scheduled to run as a report, alert or on demand.
  • Exception and/or threshold alerts on a wider range of events rising/dropping traffic to particular end point, rising/dropping protocol to end point, idle period to end point, etc.
  • Time of day event alerting and thresholds
  • Flexible SNMP trapping alerts
  • Ability to set global real-time alerting thresholds based on changes in volume, destination, source or port.
  • Ability to email and store PDF, CSV. HTML.

Most Complete Filtering Capability available

  • Allow you to filter in/out exactly the information you need
  • Reports on which hosts, applications, protocols, etc. are using the most network traffic.
  • Menu bars and shortcuts facilitate rapid analysis.
  • Ability to apply filters when performing a packet capture.
  • Correlation and analysis of feeds from multiple appliances.
  • Application protocol real-time alerting based on specific pre-defined groups or targets.
  • Built in One-Click Capacity Planning
  • AS Number reporting
  • QoS analysis
  • Packet size distribution or flows for use in Billing or Security analysis.
  • Route Path Analysis through multiple devices
  • Search for hosts or applications quickly across hundreds of flow sending routers/ switches.
  • Device Grouping, Location Grouping, Subnet Grouping
  • Ability to create 95th Percentile (Or any percentile) for any measurement such as bps, packets, Extensive chargeback information - Provides byte, flow, packet counting and 95th percentile information from the interface down to the smallest addressable network unit or user. Enables complete flexibility on the combination of elements to be used for chargeback including Network AS, IP address, Ports, Applications, Locations or QoS. Providers can differentiate pricing based on time periods, server, content or route.
  • Ability to perform a packet capture on a time interval as well as number of packets.
  • Exclusion reports provide automated ability to remove duplication when analyzing multiple routers or switches or detailed information when looking at a single device

NetFlow Auditor is unique in overall architecture

  • Baselining - Comparative analysis of each element across the time line. Gives the ability to identify which element caused the change and when.
  • Powerful and Flexible Analysis: Packet Size, Full Flow, Count, Deviation, Bidirectional, Cross-sectional and Business group analysis.
  • Unattended (proactive) Analysis, Alerting and Reporting or create drilldown templates for quick analysis of your specific needs.
  • Most complete Flow Archiving in the industry. Provides hours, weeks months and years worth of data complete Auditing capability of every minute for security and performance needs or hourly long-term trending for capacity planning and system architecture needs.
  • Data Collection Tuning - Collect only the data required. NetFlow Auditor provides strategic data collection tuning allowing inclusion / exclusion for collection
  • Scalability, Fault Tolerance, and Self Healing - Scales to collect at rates above to 2 Million flows/minute.
  • Captures Cisco NetFlow, and IPFIX data and monitors the overall network health and export loss statistics.
  • Customizable login environment for each account with analytics for IP Owner to only view their Subnet or Device

NetFlow Auditor License Investment

NetFlow Auditor comes in three license tiers; The Performance license scales well beyond other products in the NetFlow arena and is designed to provide only real-time functionality with Top Analysis data in line with the other NetFlow products; the Professional license allows full raw flow capture and forensics with long-term trending, and; the Enterprise license is Telco grade for very large flow captures. NetFlow Anomaly Detection is an optional add-on module.

Performance Management versus Forensics

A view to only the "Top" conversations or applications provides sufficient information to quickly troubleshoot the main traffic offenders but most issues hide below the surface. So if deploying only a Top Flow view defeats the purpose of deploying a solution for complete network visibility then why do we sell it?

We know that customers needs are different at different times. By providing a Top Flow view with ability to move to a Full Flow view with a simple license change means that our customers investments are safe. So if budget only allows a small start, we provide the very best small start in the industry.

Many customers entering the NetFlow space are still new and often compare a more competent technique against the lower end collectors in the market place. In this case, our Performance licenses are more appropriate. The collection mechanism in our Performance license offers an low-cost-entry option that still goes deeper in granularity than competitors. NetFlow Auditor Performance license can still handle hundreds of devices. With our Perfomance orientated License the view of data is still highly granular and every effort is made to keep relevant flows with the default but configurable option being split between Top Bytes, Top Packets and Top Flow generators.

The investment benefit with the Performance license is that you can easily move to better visibility or functionality when you are ready without losing your initial investment. Simply by changing or adding to the license key provides increased visibility and add-on features. This means that NetFlow Auditor is a scalable investment that can begin with a small license and grow with changing needs.

Download Links

Join our NetFlow Network Auditing Forensics and Security Community

NOTE: After installing NetFlow Auditor please use "Username: Administrator and Password: adminpass" to login and follow the prompts.

   Windows


NetFlow Auditor for Windows v4.4.0 (exe) - MD5 -

NetFlow Auditor for Windows v4.4.0 64-bit (exe) - MD5 -

This version installs Mysql, tomcat, Java 1.6. Please remove any existing 3rd party applications before installing NetFlow Auditor.
Supported OS: Windows XP/Vista/2003/2008 Server R1/R2
Upgrade 3.5.11, 3.6.[1-8], 3.7.0 to 4.4.0
Upgrade for pre 3.6.7 versions should be run closest to the start of a new hour and preferable at the start of a month for an ISP class customer.

   Linux


NetFlow Auditor for Linux v4.3.0 (tar) - MD5 -

NetFlow Auditor for Linux v4.3.0 64-bit (tar) - MD5 -

Note: Do not use these to Upgrade. Please use the Upgrade script provided below This version installs Mysql, tomcat, Java 1.6. Please remove any existing 3rd party applications before installing NetFlow Auditor.
Supported OS: 32/64bit Redhat/Centos 5.x. Pre 5.x supported email with upgrades from 3.7.1 email for support.

1. Copy to an empty directory and unarchive
2. tar xf NetFlowAuditor-v4.3.0.tar
3. ./install.sh


NetFlow Auditor Upgrade to Linux v4.3.0 (gzip tar) - MD5 -

1. Copy to an empty directory and unarchive
2. tar xfz NetFlowAuditor_Upgrade_v4.3.0.tar.gz
3. ./install_upgrade.sh

By downloading this software you are agreeing to the Software License Terms & Conditions.