Multi-vendor Support and Compliance

ICmyNet.Flow collects NetFlow records exported from routers and multilayer switches. In the case of Cisco devices, system supports widely used NetFlow® protocol version 5 and the latest version 9, which supports advance network technologies, like IPv6. The system also supports similar protocols from other vendors, such as Juniper J-Flow®, Huawei NetStream® and Nortel IPFIX®.

Multi-platform

ICmyNet.Flow can be run on Windows and Linux platforms (CentOS and Ubuntu), making it suitable for use across a variety of complex environments.

Web-based User Interface

User interface is presented through advanced ICmyNet.Flow Web Application. This makes the system easily accessible from any part of the network or from the Internet. Access is achieved via personalized user accounts with several levels of access privileges:

• Administrator – has all rights
• Write - can create and configure Traffic Patterns can see global settings but can not change it
• Read - can review network statistics and Raw Data
• Guest - can review network statistics only.

Traffic Patterns - Define your Traffic of Interest

With ICmyNet.Flow Traffic Patterns you can define network traffic that is most interesting to you, regardless of physical interfaces. All you need is the source and destination IP address. With them, network traffic is defined, matched and filtered by ICmyNet.Flow via Traffic Patterns.

Furthermore, other NetFlow parameters can also be used in Traffic Pattern definition: routers and their interfaces, hosts, network services and protocols, AS numbers, QoS marks etc. In various ways, you can, for example, analyze the structure of the network traffic between your internal network and whole Internet, Facebook, proxy servers, application servers, or to monitor sensitive applications traffic.

IP Subnets Hierarchy

You can divide your entire network in logical structures based on IP address ranges called Traffic Patterns and then further divide Traffic Patterns into subnets. You can also group subnets in your network by some logical criteria (independent to IP address) into subnet sets. All network statistics are available for each Traffic Pattern, subnet and subnet set.

In this way, you can establish a fully customizable hierarchy of your network.

Comprehensive Statistics

All statistics are available for Traffic Pattern and associated subnets hierarchy for various parameters:

• Local IP subnets
• Local Hosts (IP addresses and DNS names)
• Network services and applications according to the TCP/UDP ports
• Network protocols (TCP, UDP, ICMP, GRE, ESP...)
• QoS markers (ToS, DSCP or IP precedence)
• Autonomous systems (AS numbers).

• Throughput in bits/s (Kbps, Mbps...), packets/s and flows/s
• Traffic volume in bytes (KB, MB,...), packets and flows.

• Throughput - time diagram, which represents one or more parameters within the selected time frame, makes fallowing changes in traffic and recognizing traffic trends easy
• Volume - visual distribution of "Top-talkers" in a pie-chart form, e.g. Top N bandwidth consumers or other statistics, makes visual representation of top consumers easy to understand and comparable to other consumers
• List – complete list of network traffic contributes where all parameters are shown in a table form with advanced sorting options according to any statistics variable.

Easily Accessible Statistics and Database Management

Network traffic data is analyzed and aggregation statistics are stored in database for later fast review. Data is aggregated in three levels allowing you to save much needed details for recent network events while saving your storage space. The level of data aggregation can be configured according to your needs and according to your server performance.

Data Archive

Besides the statistics based on aggregated data which are stored in the database, all collected flow records are also saved in the archive files as Raw Data. This means that statistics about each and every network conversation is preserved. This is particularly useful for detail review and searching of specific events in the network, such as hacker attacks, virus activities, excessive bandwidth consuming, etc.

You can search the Raw Data in ICmyNet.Flow by any NetFlow parameter like IP address, host, AS etc. Archive is stored in compressed form in order to save as much historical data as possible while taking as less space as possible.