Category: StealthWatch

Very Cool Workflow Addition in StealthWatch

Here is a very cool workflow addition (and huge time saver!) within StealthWatch System 5.8 as an option from a flow table query… When you are viewing a flow analysis and are looking at the exporter interface information to see where the flow came from, you can right-click the list of interface(s) and select Interface Status to jump to a view of each interface that observed the flow.    READ MORE

CATEGORIES StealthWatch
TAGS stealthwatch, flow analysis, sflow, workflow, netflow, network performance monitoring, wan optimization, network visibility, anomaly detection, network behavior analysis, network troubleshooting

Configuring Cisco’s Flexible NetFlow for use with StealthWatch

Well it looks like Cisco's Flexible NetFlow (“FnF”) is finally starting to get some traction in production NetFlow environments. Flexible NetFlow provides a wide range of unique fields that can be enabled for use in your StealthWatch NetFlow collector. Cisco is adding more and more capabilities to FnF and we’re recommending that people get on board as soon as possible. StealthWatch 5.10 (releasing end-Sept) makes use of many of the special FnF fields for OS Fingerprinting so if your not using it you’ll be missing out when 5.10 hits. Cisco has published an amazingly detailed whitepaper on FnF internals so… READ MORE

Resetting .JNLP associations to “Java Web Start.app” in OSX

Most people just use the Mac and never really have to think about how the underlying applications and services operate. You point, click, and things just happen. The Mac so rarely needs "fixing" that its users never have to learn how. So when something "core" breaks in OS X it's a pain to repair. Apple recently released Java SE 6.0 for OS X. This release offers the usual gambit of bug fixes, performance improvements, and tons of other items that most users will want. Unfortunately on some systems when you install SE 6.0 the "Open With..." associations between Java Web Start… READ MORE

Coming Soon: Non-Deduplication Groups

        This is the second installment of feature previews for StealthWatch 5.10. It's a bit obscure and really only applies to a handful of customers but those that do have this kind of environment will find it extremely useful for improving the accuracy of NetFlow derived traffic measurements.   StealthWatch 5.10 Non-Deduplication Groups In some larger environments, traffic can flow across the network with multiple paths in the same direction. EIGRP equal cost load balancing can cause this among other things such as BGP MED/local preference. In this situation StealthWatch 5.9 will pick the exporter with the… READ MORE

Coming Soon: Quick View

I use a number of different products on a daily basis (Warcraft, Microsoft Entourage, iTunes, OmniGraffle, etc) and always love getting previews of new functionality on the way from the developers. Product previews give you something to look forward to and allow for some early feedback before the product is actually released. We're about 1.5 months (give or take a few weeks) from our 5.10 release and far enough along that we can start previewing some of the flashy new StealthWatch features. So here goes... StealthWatch 5.10 Quick View StealthWatch Quick View is designed to allow the user quick access… READ MORE