WAAS and Netflow, traffic reports are inflated unpredictably

Not sure if anybody has any luck getting Netflow to report correctly when WAAS is in a picture. We have about 30 sites deployed with WAAS in out of line configuration and every single one of them incorrectly report Netflow traffic to our NetQoS Reporter Analyzer product. Typically the traffic throughput seems to be inflated several times higher. We tried every which way to alter the netflow configuration in the router including Egress Netflow but the traffic is still showing higher than actual traffic coming out of a port. In one site, even the "show interface" command on the router shows 5-minute rate of 16Mbps on a 6Mbps Mulitlink circuit.

Hello Thang Lu,
We have run into this issue with a few customers and here are a some things to consider:
- If you have 'Flexible' NetFlow enabled: Beware, Flexible NetFlow does not export the flow direction by default you must configure the direction bit to be set for egress flows. Traditional NetFlow v9 does this automatically.
- Are you excluding certain protocols in NetQoS? If you don't do this, some tunnels and VPN connections will be exported twice!
These are the protocols we exclude by default in Scrutinizer NetFlow Analyzer:
I hope these suggestions help you.
Jake

Similar Messages

CISCO PRIME INFRASTRUCTURE NETFLOW TRAFFIC REPORT

Hi,
I have a report from cisco prime infrastructure, that I don´t know how to interpret, because the fields in the report I don´t know what´s mean them, the difference between them, what are optimal values, the worse values, etc.
Can someone help me with this
The name of the report is: FLEX NETFLOW TRAFFIC TQPQ
The fields that I don´t know what are:

hello,
I also have a problem concerning the interpretation of the report that I got. if anyone knows how Cisco gets its premium reports, it will help me!

WAAS and "Other traffic"

Hi there,
Recently I have deployed WAAS for just one site, and I am a bit concerned as majority of the traffic falls into "Other Traffic" category. I've discovered this is just a file transfer between XP desktops and a W2003 server.
Why it's categorized as Other?
Thanks

Correct - that would be SMB traffic. Prior to 4.0.7, it should be classified as part of the File-System application. From 4.0.7 on, it is classified as part of the WAFS application.
Can you please confirm that you have classifiers that cover ports 139 and 445. If so, which application is the classifier associated with?
Zach

Web analysis, SQR Production Reporting, and maybe Interact Rpting are dead?

Hi,
I dont wish to hurt anyone but would like to know the facts from experts.
Look Smarter blog says "Web analysis, SQR Production Reporting, and maybe Interactive Reporting are dead?"
http://looksmarter.blogspot.com/search/label/Top10
Is this true?
Thanks,
Shashi

Hi Mehmet,
thank you. I could not answer on friday, was not at office.
I tried according to the instructions of oracle ( http://docs.oracle.com/cd/E17236_01/epm.1112/pr_studio/frameset.htm?data_connection.html ). See comments:
To create an Essbase data source connection:
1. OK
Select Connection on the main SQR Production Reporting Studio screen.
The Create Data Connection wizard is displayed.
2. OK
On the first page, enter a name to identify the data connection.
For example, you could enter Essbase to identify a connection to an Essbase data source.
3. OK
On the second page, select DDO to identify the data source provider.
4. NOT OK. The messages shown: "Unable to start the JVM. Ensure that the JRE section of the SQR.INI file contains the correct directory. (4)"
"Unable to erad DDo Registry.Properties file. Check location and accessibility, an that the sqr.ini DDO pathvariable settings are correct (DDO.3)."
On the third page, select an Essbase data source.
The wizard displays the available registries and data sources.
Seems some setting problems. We would check that. Any suggestions to that error??
Ole

Performance by system and utilization reports are blank after upgrading SCOM 2012 SP1 to SCOM 2012 R2

Hi Experts,
We are getting blank Performance reports after upgrading to SCOM 2012 R2. Can anyone provide fix for this issue?
All the reports are working fine except Performance by system and utilization report.
Thanks in advance.
Regards
Karthick Malayalan

Hi Karthick,
Here are two links for your reference regarding to the blank report issue:
SCOM 2012 performance by system report and perform by utilization
https://social.technet.microsoft.com/Forums/systemcenter/en-US/b1b13318-2de5-4940-82a2-a8ce5b832c11/scom-2012-performance-by-system-report-and-perform-by-utilization?forum=operationsmanagerreporting
Base OS MP Version 6.0.6989.0 Imported? And Now Some Reports Are Partially
Empty?
http://thoughtsonopsmgr.blogspot.com/2012/11/base-os-mp-version-6069890-imported-and.htmlRegards,
Yan Li
Regards, Yan Li

To find whether the reports are in use or not for a given period

Hi Basis Gurus,
We have an requirement here that the client wants to know that the whether the reports for a given period are in use (working) or not.
I think we can do it when we have audit logging activated ,but now we dont have audit logging activated now.
Let me give you an example below
Suppose for past 1 year 100 reports are prepared and out of 100 reports 95 reports are not working and remaining 5 reports are working.How can i get the detials from the SAP system without audit logging activated.
Please help me
Regards,
Anil.

Hello,
See if ST03N helps you.
Switch to expert mode in ST03N. Naviagate to Workload > Month > month . Click on the available month. Then in the " Analysis Views" visible on the lower LHS, Select transaction profiles > standard. See if you have your 'Z' report in that.
Thanks and regards,
Anish

Project Summary and Base Calendar Reports Error Message when Saving to Desktop from Server

We have a user that gets the following popup when she attempts to save file from the Server to her desktop:
"The Project Summary and Base Calendar reports cannot be opened, renamed, or deleted". The popup includes a red circle with a white "X" and an "OK" button. The OK button must be clicked 27 times
before the file will eventually save to the desktop.
I have been able to replicate this error when I try to save her file to my desktop, as well.
I can see from the Organizer that the Project Summary and Base Calendar reports are part of the Global, but not part of the file-specific reports while on the Server. This is true for other schedules in our enterprise, so I am not sure why this is
occurring. After performing the save and clicking "OK" 27 times, there is exactly 27 reports listed for this file in the Organizer, but the Project Summary and Base Calendar reports are the only two that did not transfer with the file.
What is going on here and why is it happening for just this file? It feels like we are getting into a contention issue between the local Global.MPT and the Enterprise Global.
We are on Project Server v2010 SP2.

Thanks for your feedback Chris!
When you open the organizer, check that you don't have for the project in question any enterprise object on the project side.
Have you installed the
latest PS2010 CU? A more radical way for reparing a file is to export it as an XML file and save/publish it back on Project Server as an MPP file. But the project UID will change thus it will cause trouble
in case you have timesheets. You could also try to delete the project and restore it (assuming you have the daily backup in place).
Hope this helps,
Guillaume Rouyre, MBA, MCP, MCTS |

Some reports are not displayed -- JInitiator 1.3.17 to JRE 1.6.43

We have our Medical Suite developed using Oracle Forms 10gR1(9.0.4) version.As we came to know that JInitiator is no more supported from Oracle and it has many problems Windows 7 64 bit esp.., with IE (9.0) recently we have migrated the Client PC's from JInitiator 1.3.17 to JRE 1.6.43.
Unfortunately when we print the reports, some of the reports are being displayed and the other reports are not being displayed ( No action upon on clicking print button).
But when we revert back to JInitiator all the reports are working fine without any change in IE configuration. So can someone give me the probable cause for this behaviour.
Edited by: Chaitu on Mar 17, 2013 8:57 AM

Chaitu wrote:
If the parameter are written in multiple lines using concatenation then there is no problem, but some places we made the DESTYPE OR CACHE OR DESFORMAT in different lines and it is working fine when we used Jinitiator 1.3.17.
Once we changed to JRE, it stopped working maybe because the command cannot be issued to browser since it is incomplete.
Is 10.1.2.3 a stand alone patchset given by Oracle for migrating 10g R1 to 10g R2 or there are some other patches given before this patchset(10.1.2.3).
I am asking this because most of the times, Oracle releases a patch in sequential order and they should be installed in the same order.
For example In order to install Enterprise Manager 10g Grid Control Release 5 (10.2.0.5), we must have 10.2.0.1.0 (10.2.0.2.0 for Windows) release up and running. So I was not sure whether this patch can be installed alone without any other combinations directly. Please enlighten me if you can.
Hi Chaitu,
patchset(10.1.2.3) is applicable for the following releases only:
Oracle Application Server 10g Release 2 (10.1.2.0.0)
Oracle Application Server 10g Release 2 Standard Edition One (10.1.2.0.1)
Oracle Application Server 10g Release 2 (10.1.2.0.2)
Oracle Application Server Forms and Reports Services (10.1.2.0.2)
Oracle Application Server Portal 10g Release 2 (10.1.4)
Oracle Application Server Portal 10g Release 2 Patch Set 2 (10.1.4.1)
Oracle Developer Suite 10g (10.1.2.0.2)
Oracle Business Intelligence 10g Release 2 (10.1.2)
Oracle Business Intelligence 10g Release 2 (10.1.2.0.2)
Oracle Business Intelligence Tools 10g Release 2 (10.1.2)
Oracle Business Intelligence Tools 10g Release 2 (10.1.2.0.2)
Oracle Business Intelligence Tools 10g (10.1.2.0.2) that shipped as part of Oracle Developer Suite 10g Release 2 (10.1.2)
OracleAS 10g Release 2 Patch Set 1 (10.1.2.1.0)
OracleAS 10g Release 2 Patch Set 2 (10.1.2.2.0)
Hope this helps
Hamid
* batter discuss at {forum:id=82} forum.

No reports are visible in ConfigMgr 2012 R2 console but in visible in SSRS report manager

I'm installing ConfigMgr 2012 R2 with SQL server R2 SP2 in my lab environment. Everuthing went fine until i stumped upon a problem where the reports are not visible in Admin console but are visible in IE
I've gone through all the pre requisites and everything looks good.
The installation went fine and no errors in srsrpsetup.log and srsrpmsi.log
Reports are returning values while i'm running through IE
changed the AdminUIlog level to verbose and found the below error whenever i refresh the reporting node.
[44, PID:10712][12/20/2013 04:16:39] :Console query 'AllReports' started
[44, PID:10712][12/20/2013 04:16:39] :SRSQuery: Executing query [AllReports] - [/ConfigMgr_LAB]
[44, PID:10712][12/20/2013 04:16:39] :[sccm.lab.local] : The request failed with HTTP status 503: Service Unavailable.
[44, PID:10712][12/20/2013 04:16:39] :[sccm.lab.local] : The request failed with HTTP status 503: Service Unavailable.
[12, PID:10712][12/20/2013 04:16:39] :Actions returned from cache for node 'msscnav://root/Windows/Wunderbar/ConsoleDisplay/MonitoringNode/MonitoringNodeOverview/ReportingRootNode/ReportsNode'.
Any ideas ?
Kindly mark as answer/Vote as helpful if a reply from anybody helped you in this forum. Delphin

Thank you Garth, I can access the reports from other hosts as well.
Yes ,Newly created admins can see all the reports
I've gone through the event logs and nothing related to SSRS.
I dont think it's a FQDN issue, bcoz ican see in the logs the that the admin console successfully connected to reporting service. Only while retreiving the reports it throws error
[10, PID:3172][12/23/2013 06:13:23] :[ReportProxy] - Discovered reporting services point - 'sccm.lab.local'.
[10, PID:3172][12/23/2013 06:13:23] :[ReportProxy] - Root folder name is 'ConfigMgr_LAB'.
[12, PID:3172][12/23/2013 06:13:23] :[ReportProxy] - Connected to Reporting Services [MSSQLSERVER] - [http://sccm.lab.local/ReportServer], on machine [sccm.lab.local]
[20, PID:3172][12/23/2013 06:13:23] :[ReportProxy] - Connected to Reporting Services [MSSQLSERVER] - [http://sccm.lab.local/ReportServer], on machine [sccm.lab.local]
[20, PID:3172][12/23/2013 06:13:23] :SRSQuery: Executing query [Folders] - [/ConfigMgr_LAB]
[12, PID:3172][12/23/2013 06:13:23] :SRSQuery: Executing query [Folders] - [/ConfigMgr_LAB]
[12, PID:3172][12/23/2013 06:13:23] :SRSQuery: Retrieving folders in path [/ConfigMgr_LAB].
[20, PID:3172][12/23/2013 06:13:23] :SRSQuery: Retrieving folders in path [/ConfigMgr_LAB].
[10, PID:3172][12/23/2013 06:13:23] :[ReportProxy] - Connected to Reporting Services [MSSQLSERVER] - [http://sccm.lab.local/ReportServer], on machine [sccm.lab.local]
[10, PID:3172][12/23/2013 06:13:23] :SRSQuery: Executing query [AllReports] - [/ConfigMgr_LAB]
[10, PID:3172][12/23/2013 06:16:28] :[sccm.lab.local] : The request failed with HTTP status 401: Unauthorized.
[12, PID:3172][12/23/2013 06:16:28] :[sccm.lab.local] : The request failed with HTTP status 401: Unauthorized.
[20, PID:3172][12/23/2013 06:16:28] :[sccm.lab.local] : The request failed with HTTP status 401: Unauthorized.
[10, PID:3172][12/23/2013 06:16:28] :[sccm.lab.local] : The request failed with HTTP status 401: Unauthorized.
and as you can see, it gives me "HTTP status 401: Unauthorized." instead "HTTP status Unnavailable".
Yes, i'm not a fan of accessing reports via console, but i dont want to leave an issue unresolved.
Kindly mark as answer/Vote as helpful if a reply from anybody helped you in this forum. Delphin

Netflow is not showing on prime infra 1.2 and also reports are not generating

Hi friends,
I add my router to cisco prime for netflow and configured it by temelate as mentioned by cisco in deployment guide. I got netfloe till last friday but today i am getting anyflow on prime.
second I am not able to generate raw netflow.
how can i removed any device from data sources ifthis is nolonger present there. for better understanding i am also ataching the snapshot.

Hi,
Thanks
Yes I have configured the command âaaa accounting exec default start-stop group tacacs+â
As I have mentioned all the other reports are working. Which user and when he has logged in and what commands he has used. Only the TACAS+ Accounting and logned user is not working.
Regards,
Vineet

WAAS and NAM 4.2 Reporting

hey folks,
I recently went through the upgrade process with a customer to move their NAMs to 4.2 and integrate WAAS 4.0.15 with the NAMs via the flow agent. We followed the NAM integration guide and setup some reporting in the NAM for collecting information from the WAAS flow agents on bandwidth and response time. However, at this point, the information that we seem to be getting is limited. I am finding the reports in the WAAS GUI itself to be more valuable at this time, however, I have heard from several engineers since this integration has been available that NAM and WAAS are a good fit. Does anyone have any specific reports that they can point me towards in the NAM? Right now I have setup some Application optimization specific reports in the WAAS CM for HTTP and CIFS. What I would like to do is use the NAM to validate those reports and provide some upper management level visibility into specific flows to specific servers and how effective WAAS has been in optimizing that traffic. This customer is about to deploy WAAS worldwide and having some more detailed reporting capability would be very helpful.
Does anyone on the list have any good experience with NAM 4.2 and WAAS that they can share and some how to's on what reports they are finding the most valuable to their senior managers and IT staff? Thanks
Sincerely
Mike Louis

Hi Mike,
This webinar on Jan 12; might be of interest to you.
You can register via this URL.
     https://ciscosales.webex.com/ciscosales/onstage/g.php?d=201229605&t=a
I also attached a document that might help as well - Using NAM Hardware in a WAAS POC and Depoloyment.
Thanks
Eric - please mark as answered with a rating of 5, if this answered your questions.
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman","serif";}
Leverage Cisco Network Analysis   Module to enhance operational visibility into WAAS deployments. NAM   reports on a comprehensive set of application performance metrics such as   application response time, WAN bandwidth usage, LAN and WAN data throughput,   and other application performance metrics to:
Identify        application optimization opportunities
Analyze        impact of Cisco WAAS implementation
§ Take advantage of visibility for ongoing    optimization improvements and troubleshooting
Cisco NAM   4.1 also introduces the first software only version of the NAM as a Virtual   Blade on the WAVE 574 and WAE 674.
If you have ever felt overwhelmed   trying to answer the following questions:
·         How do I verify the impact of WAAS on   application performance at my remote offices?
·         How do I get the level of visibility needed   for effective operational manageability?
·         Is there a monitoring solution that is   integrated and does not demand additional footprint?
·         Is there a solution that provides visibility   across the entire WAAS deployment lifecycle?
Please join us for a webinar of   the Cisco NAM 4.1 that explores the performance management and   troubleshooting capabilities of NAM hardware and NAM VB in a WAAS environment   to help address the above questions and more.
WEBINAR Dates and Times:
REGISTER January 12th, 2010 Tuesday at 8:00 - 9:00 AM PST/11:00-12:00 EST
Agenda:
·         Overview of NAM and NAM VB
·         Setting up NAM for WAAS analysis
·         Use of NAM for WAAS before-and-after impact   analysis
·         Use of NAM to improve manageability and   troubleshooting of WAAS
·         Q&A
NOTE – Once you have   registered for the webinar, you will get a WebEx message with outlook ics   file.
Please   click on the .ics file when you get your message from WebEx to make sure it   is placed on your Outlook Calendar.
© 2010 Cisco Systems, Inc. All rights   reserved. Privacy Statement and Trademarks of Cisco Systems, Inc

WAAS- Optimization for OCS and Wireless traffic

Hi,
I have been trying to find some information regarding optimization of Microsoft Office Communicator and Wireless traffic across a WAN environment via WAAS and its acceleration/optimization capabilities.
So far, I have seen the case studies section for WAAS but no case offers what I am looking for...
Do you have any information/documentation that can be shared with customers regarding OCS and Wireless as key business application that were benefited after a WAAS deployment?
Thanks
Regards,
M.

Hi Manuel,
Answers for you:
So we can say that wireless traffic across a WAN link could not obtain any benefits from any WAN optimization solution, in this case WAAS?
Ans: Nope. I do nto mean that. What I am trying to say is - it's a different thing. Wireless or no Wireless, optimization can be done when the traffic passes thru edge and core side WAEs. If it passes thru only one WAE, it will go in pass thru.
If a wireless controller at a remote site needs to send traffic to another wireless controller in a centralized or HUB site, can we optimize this traffic or it will just benefit from the overall reduction in bandwidth as a result of any TCP based application getting optimized?
Ans: It really does not matter. The traffic really needs to pass thru WAEs on both sides in order to optimize. Whether it is from wireless controller or from any other devices, it really does not matter. Further the type of traffic and policies on WAEs will determine how much optimization can be done, if any.
OCS uses SIP which is TCP based or ports 506x so I am assuming that SIP could be benfited by WAAS unless OCS uses a secured session were SIP is encrypted.: Yes, WAAS can help you but SIP is a voice traffic and there are default policies like VoIP on WAAS which will pass thru this traffic for port 5060. It's not a good idea to optimize voice traffic due to various reasons.

Strangenesses of sorting and color charts of traffic reports Cisco SCA Reporter

Strange behaviour of Reporter applitation from Cisco Service Control Application (SCE). Problem is that traffic types are being sorted in different ways on graphs build with "reportercmd" command and GUI version of Reporter.
Another problem is that Windows and Linux versions of "reportercmd" command sort traffic types equally, but graphs of the same traffic type has different colours.
We'd like that console "reportercmd" sorting order was just the same as in the GUI version - it is more visually clear when torrent traffic is above the rest of the graphs.
I tried to set different values for diffrent traffic types in this file:
"reporter\plugins\com.cisco.p3.apps.scasbbtemplates_3.7.2\templates\colors.ini"
- but that traffic types did not change their colours. For instance, the following configuration:
service.Non-Encrypted\ Bittorrent = 132,115,46
service.Encrypted\ Bittorrent = 198,195,255
- has no effect. Linux and Windows configurations were the same.
Graphs were built with the following command:
./reportercmd -template "Global Bandwidth per Service" \
-dbdriver "com.mysql.jdbc.Driver" \
-dburl "jdbc:mysql://IP-MySQL:3306/apricot" \
-dbuser "pqb_admin" \
-dbpassword "pqb_admin" \
-policysce "IP-SCE" \
-params "titleText=Global Bandwidth per
Service;numhours=48;trafficdir=Downstream;showSce=false;avgdata=fals
-size 800x600 \
-format png -o gbps1-10.png \
-hierarchy "sorted;1;10"

Hi Harry (and others),
I have seen similar behavior. It seems like the client side rendering for some reason has a hard time processing the collection model wrapping the ArrayList in this particular case. The table renders empty. After sorting in ascending order, the rows are all back (visible) again.
Is anyone aware of issues with the rich table based directly on ArrayList (in combination with a changing set of values and/or sorting)? (seems like a corner case but is still not uncommon). Is there any indication that wrapping the ArrayList in a CollectionModel ourselves might be required?
Harry: do you know whether this issue is introduced with PS3 (11.1.1.4) or already existed in previous releases?
kind regards,
Lucas

Some reports are not displayed in Windows Vista and IE9

Hi,
as the title says, I had a problem with Windows Vista.
I'm using CR2008, VS2008, and .NET 3.5 to develop web form.
So, in every computer (WXP, W7) with IE9 works fine, but in Win Vista, some reports are displaying in a wrong way.
You can see a screenshot here
http://dl.dropbox.com/u/27544299/bad%20cr.PNG
SP2 installed.
Any suggestion??
Thanks.

CR 2008 SP2 does not support IE 9.
Upgrade to [CR 2008 SP5.|http://www.sdn.sap.com/irj/boc/support?rid=/webcontent/uuid/10e38d93-7f07-2d10-beae-e739182f8ada]
- Bhushan.

How to know what reports are running by looking at SSReproting Services to see what reports are running and also any clue of which application is using the reporting services?

How to know what reports are running by looking at SSReproting Services to see what reports are running and also any clue of which application is using the reporting services?

To see what reports are running, take a look at the execution log views that are available in the database. Which views that are available are dependent on your version of SSRS.
http://technet.microsoft.com/en-us/library/ms159110.aspx
To see which application is using SSRS is a little more difficult. You can turn HTTP logging on, which will give you an idea of where connections are coming from, so you can see IP addresses. You can also look at the execution log view to see
user accounts. So, depending on your environment and use of service accounts, this could be easy, or difficult.
http://technet.microsoft.com/en-us/library/bb630443.aspx
If all else fails you can look for clues in the SSRS logs. Good luck...

WAAS and Netflow, traffic reports are inflated unpredictably

Similar Messages

Maybe you are looking for