Specifications

© 2006 Cisco Systems, Inc.
All rights reserved.
Product Features 2-22
NAM / Traffic Analyzer v3.5 Tutorial
© 2006 Cisco Systems, Inc. All rights reserved.
Product Features 2-22
NAM / Traffic Analyzer v3.5 Tutorial
NM-NAM Data Sources
NetFlow & Management Traffic
NM-NAM Data Sources
NetFlow & Management Traffic
Interfaces
NAM
Internal FE Interface
External FE Interface
NAM Management traffic - HTTP(S),
telnet, SSH, SNMP, NetFlow, etc – user’s
choice to use internal or external FE
NAM Management traffic - HTTP(S),
telnet, SSH, SNMP, NetFlow, etc – user’s
choice to use internal or external FE
Interfaces
NAM
Internal FE Interface
External FE Interface
N
e
t
F
l
o
w
E
n
a
b
l
e
d
D
e
v
i
c
e
N
e
t
F
l
o
w
E
n
a
b
l
e
d
D
e
v
i
c
e
NDE
Internal Interface for
Management traffic uses router
CPU, RAM, and backplane
resources
Internal Interface for
Management traffic uses router
CPU, RAM, and backplane
resources
Note: NDE traffic will be counted as
part of internal/external port analysis,
as well as, being analyzed as a
separate data source
Note: NDE traffic will be counted as
part of internal/external port analysis,
as well as, being analyzed as a
separate data source
NDE
NM-NAM Data Sources – NetFlow and Management Traffic
Besides presenting analysis of traffic flows seen by the internal and external interface, NetFlow data streams
are also analyzed though they are received on either the internal or external interface. Since NetFlow traffic
will be sent to the NAM on UDP port 3000, the analysis software is able to break it out as a separate data
stream.
The interface used to receive the NetFlow data streams depend on which one of the NM_NAMs interfaces is
configured to be in management mode. The interface configured to be in management mode will also be
used to receive and send out the client http traffic, any SNMP requests of the NAM data, and any telnet
session to the NAM itself. Obviously, if the internal interface is configured as the management interface
(default) this will put additional stress on the router’s resources. If the external interface is configured as the
management interface, then it must be on a segment that allows access (i.e. not connected to a SPAN port
on a switch).
Since the management traffic is received on one of the NAM ports, it will also be counted in the analysis of
that interface.
In general, it is extremely important to manage the data sources supplying data to the NAM. The user must
understand how the NAM and it’s data sources are configured in order to help interpret the various NAM
reports.