Owners Manual

Traffic Flow Analysis Life Cycle | Traffic Flow Analyzer
550 OMNM 6.5.2 User Guide
14 Post batch of flows to the application server —Most of this processing occurs in the
mediation server (process or host). Once OpenManage Network Manager produces the
normalized, protocol-independent flows, it adds them to a queue the mediation server posts
to the application server. Once the application server receives these results, it inserts them
into the database for later querying. You can monitor this queue through the JMX console >
oware > service=NetFlowListenerMBean and the operation getQueueCount.
15 Receive flows —The application server receives flows from the mediation server.
16 Update control records —Every flow refers to control data, which includes the IP address of
the sender and receiver, the AS number of the sender and receiver, the protocol and the
application. OpenManage Network Manager updates the associated database records here.
17 Insert one minute rollup records —OpenManage Network Manager inserts the one minute
rollup flows into the database so they can be queried later.
18 Compute larger rollup data —The one minute rollup records contribute to larger rollup
records, including those representing 10 minute, hourly, daily and weekly time intervals. At
the end of every time interval TFA computes the appropriate rollup records.
19 Compute cache data —Sometimes the volume of data can be so high that queries
summarizing it can take several minutes. To make querying more efficient, OpenManage
Network Manager summarizes the data ahead of time and caches the results in the database.
20 Done —Done processing new traffic flow data.
21 Apply retention policies —Apply retention policies to add new rollup tables and/or drop old
rollup tables.
22 Create new rollup tables —OpenManage Network Manager creates new rollup tables as
necessary according to the settings in NetFlowRetentionMBean as specified in the attributes
rolloverFrequencyValue1Min, rolloverFrequencyValue10Min, rolloverFrequencyValueHourly,
rolloverFrequencyValueDaily and rolloverFrequencyValueWeekly.
23 Drop old rollup tables —The old rollup tables are dropped as necessary according to the data
retention settings that can be edited by clicking on the wrench icon from the expanded TFA
portlet.
24 Done —Done applying retention policies.