H3C Technologies H3C Intelligent Management Center - Manual (Page 167)

157
6 Probe monitoring
This chapter provides information on network flow data reporting using data gathered by probe servers,
also called probes. This chapter explains how NTA analyzes network flow records from probes to report
on network traffic and looks at the reporting options for probe traffic analyses This chapter also provides
a survey of the summary reports for all probe tasks a look at the more detailed reports for an individual
probe traffic analysis task.
Probe traffic monitoring overview
In NTA, a probe is a probe server. A probe server is an application that runs on a dedicated server. A
probe server acts as a network flow generator that transmits network flow data to the NTA server that acts
as a flow collector. probe servers receive information forwarded to it from network devices. NTA retrieves
data from probe servers when the probe server is added to the NTA server as a probe. Operators use
probe servers when the devices in their network cannot generate NetStream, NetFlow, or sFlow data.
After you add a probe server to an NTA server as a probe, and the probe is selected in the NTA Server
Management page, the NTA server is ready to begin processing data from the probe. Probe traffic
analysis tasks instruct NTA to begin processing probe server data based on the task configuration.
Probe traffic analysis tasks analyze network flow data by the probes you specify in probe traffic analysis
tasks. NTA parses all network flow data and provide various statistical views of traffic that was received
by the probes configured in a probe traffic analysis task. For example, NTA provides source and
destination host information reporting by probe, displaying traffic attributed to specific source or
destination hosts that were observed sending or receiving traffic from the locations on the network where
probes were deployed.
In general, the NTA probe traffic analysis tasks provide traffic visibility for the locations on the network
where probes have been deployed. The probe reports include traffic for all probes in all tasks, for all
probes in each task, and for individual probes in a task. Probe statistics include traffic statistics and
statistics by application, source host, destination host, and a session or source/destination host pair.
These reports are organized into multiple layers from summarized information for all tasks to detailed
reporting for specific probes configured for an individual probe traffic analysis task.
Probe traffic analysis reporting overview
After you create the first probe traffic analysis task, NTA creates a Probe Traffic Analysis Task entry
under the Traffic Analysis and Audit area on the left navigation tree.
Click Probe Traffic Analysis Task on the left navigation tree to view the summary report for all probe
traffic analysis tasks.
Move your mouse pointer to the shortcut menu icon to the right of Probe Traffic Analysis Task.
The Probe Traffic Analysis Task shortcut menu appears to display all probe traffic analysis tasks created
in NTA. Click the name link for a task to view the probe traffic analysis report of the task.
The summary probe traffic analysis report provides the following information:
• Average Rate (Last 1 Hour)—This bar graph provides summarized average rate per second
reporting for all probe traffic analysis tasks summarized by task. Each bar in the graph a link to