Blog Entries

16. 02. 2023 Giovanni Davide Saccá Unified Monitoring

NagVis Module: How to Create a Regular Map

NagVis is a visualization add-on for NetEye, and can be used to show NetEye monitoring data, over for example, a Network Schema as the use case below will show you. Thanks to NagVis, you can import a previously created network schema into NetEye, and overlay network objects that have previously been monitored by NetEye. Let’s…

Read More
15. 02. 2023 Giovanni Davide Saccá Unified Monitoring

NetEye GeoMap Module

NetEye provides its users with the GeoMap module, and recently a customer asked me to prepare a useful GeoMap configuration for him, so he could geographically locate the backbone devices in his network. The NetEye Geo Map module allows you to overlay the position and status of hosts on top of a customizable map, based…

Read More
15. 02. 2023 Giovanni Davide Saccá Unified Monitoring

Ntopng and Behavior Analysis

Ever since version 5.4 of nBoxes with the Enterprise L license it’s been possible to use a new feature called Behavior Analysis. Let’s see what it is and how to take advantage of it. This ntopng feature enables monitoring of periodic flows of network traffic, i.e., flows that frequently repeat, by highlighting the services it…

Read More
15. 02. 2023 Giovanni Davide Saccá NetEye, Unified Monitoring

Grafana: InfluxDB Query to Extract More Than a Single Metric in a Single Panel

A particular client who operates as an ISP for its customers and corporate departments requested the ability to summarize and display, in convenient graphs, a few metrics related to the bandwidth delivered on switch ports, where the available gateways provide connectivity. The first activity I undertook was to obtain the MIB files and OIDs from…

Read More
15. 06. 2022 Giovanni Davide Saccá Unified Monitoring

Into the Flows: Collecting Data with nProbe and nTop

The role of these two components is pretty clear: nProbe has the role of collecting traffic data, while nTop makes that data visible and easily analyzable. There is something, however, that needs to be explicitly stated, which is to decide whether it’s ntopng that should contact nProbe or vice versa, and as we’re in a…

Read More
14. 06. 2022 Giovanni Davide Saccá NetEye, Unified Monitoring

nTop and nDPI: How to Increase Network Traffic Analysis

nTop now uses the nDPI (network deep packet inspection) library to classify packets within network traffic for those protocols that either do not use a standard port (defined as well known ports like https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers and https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml) or that are dynamically assigned. In any case the need to classify not only the packet header but also…

Read More
13. 06. 2022 Giovanni Davide Saccá NetEye, Unified Monitoring

NeDi:  Troubleshooting NeDi Discovery and Configuration File Backup

A customer with a NetEye installation to which I had added the NeDi module asked me if I could integrate the saved configuration files of “discovered” network devices with NeDi. NeDi, for those who are not yet familiar with it, is a Network Discovery tool based on many different network protocols. The first action NeDi…

Read More
13. 06. 2022 Giovanni Davide Saccá ITOA, NetEye, Unified Monitoring

Grafana for nTop: Realizing a Dashboard

A customer with a NetEye installation to which I had added the nTop module asked me if I could integrate nTop’s Grafana Dashboards, so they could view them by consulting NetEye’s ITOA Menu. The installation and configuration of nTop for this client, a task I had already conducted some time ago, was a matter of…

Read More
02. 11. 2021 Giovanni Davide Saccá NetEye, Unified Monitoring

nBox to NetEye Elastic Module

A customer asked me to analyze their network flows, with a solution oriented towards using an nBox that collects NetFlow data from a router located away from the branch office, takes it in for analysis, and then sends it to a NetEye Elastic module, which act as an analysis console for that NetFlow data. The…

Read More
11. 10. 2021 Giovanni Davide Saccá NetEye, Unified Monitoring

Distributed, Multi-Instance nProbe: NetFlow Analysis

A client with a really large number of routers installed at their client asked me one day to analyze each of those network flows. They hoped that an analysis tool would be able to discover and impose a multitenant configuration all on its own, so that access could be granted to final users while guaranteeing…

Read More
05. 10. 2021 Giovanni Davide Saccá NetEye, Unified Monitoring

nProbe and nTop All-in-One (Single Node): Netflows Analysis

One of my clients with a number of routers installed at their own remote location asked me if I could analyze the network flows at multiple locations. Their network architecture is a full mesh, and thus has private subnetworks, data center environments, and even in some cases cloud providers. Complex architectures like this require increasing…

Read More

Archive