Managing applications in nta – H3C Technologies H3C Intelligent Management Center User Manual

Page 37

NTA displays all NTA servers in the Server List displayed in the main pane of the Server

Management page.

In the Capture Flux Log field for the NTA server for which you want to capture a flux log, click the
icon .

When prompted, click OK to capture the flux log.

The Server Management page displays the results of the capture flux log request at the top of the page.
Review the results of this request to ensure that NTA is configured to successfully capture the flux log. After

you capture the flux log, you can use the traffic log auditing feature to view captured data. For more

information about the traffic log auditing feature, see "

11 Performing traffic log audits in NTA

Managing applications in NTA

NTA enables you to manage the applications that NTA analyzes and reports on. Using the NTA

Application Management features, you can create applications, protocols, and application categories,

and define which of the protocols NTA analyzes. This enables you to refine and customize NTA to meet

your specific traffic monitoring and reporting needs.
Applications enable you to configure NTA to analyze and report on predefined applications or

applications in use in your environment that NTA does not include in the predefined list of applications.
There are two types of applications: Layer 4 and Layer 7. With Layer 4 applications, you specify the

application name as well as the Layer 4 protocol in use, TCP, UDP, or both. In addition, you specify the
Layer 4 port number that the application uses. When a match is found, NTA attributes the traffic in NTA

reports to the application name you provided.
With Layer 7 applications, you specify the application name as well as a regular expression string that

NTA uses to compare against the contents of the Layer 7 portion of every IP packet. When a match is
found, NTA attributes the traffic in NTA reports to the application name you provided.
NTA uses a protocols list for analyzing network traffic. You can create user-defined protocols and modify

predefined protocol names. You can enable or disable the protocols on this list to tune NTA to meet your

reporting needs.
Application categories enable you to group applications together for summarized analysis and reporting.

You can create application categories that are organized by application or by protocol. When you

create an application category based on application, you select from the list of existing applications

comprised of the predefined and user-defined applications. When you create an application category
based on protocol, you select protocols from the NTA predefined and user-defined protocols list. Either

way, NTA provides summarized analysis and reporting for all applications in the group.
The first step in customizing NTA to meet your needs is to review the NTA list of predefined applications

to identify the applications it does and does not contain. Compare the results of your review against the

list of applications used in your environment that you expect to use NTA traffic analysis reporting for.
Then, create applications in NTA for all applications that are not on the list. For more information about

creating and managing applications, see "

Managing applications

Then, review the protocols list in NTA and identify any protocols in use in your environment and verify

that they are enabled in the Protocol List. For more information about managing protocols, see
"

Managing protocols

After you add the applications and enable or disable the protocols, create application categories to

group applications and protocols to meet your analysis and reporting needs. For more information about

creating application categories, see "

Managing application categories