2.7. Preparation of Switch, Router and Client PC
This section discusses about the preparation of data input to
nLive such as
netflow or packet stream. It additionally discusses the user interface
that runs inside a web browser on a client PC.
A fast client PC is needed to access the web-based user interface
of nLive via HTTP or HTTPS protocol. The minimum recommended client PC should have at
least 1 GHz CPU and 1GB of RAM running MS Windows XP/2000/Vista
and recommended browser, Firefox 1.5 (or later), or Microsoft Internet
Explorer 6.0 (or later) installed.
2.7.2. Router preparation
Please refer to the documentation of the router which exports netflow.
Then setup netflow version 5 or 9 to be exported to nLive Flow
or Enterprise.
nLive can only decode version 5 or 9 of netflow. Please direct it to
port 9996. If you would like to choose a different port, do so under
the system settings.
2.7.3. Switch preparation
For Packet analysis (nLive Core and nLive Enterprise),
one needs to obtain a packet stream from a switch, hub, or tap.
One should study and understand how to mirror traffic to a
switch port where packets can be captured by nLive. The port
mirroring is done in a similar fashion with a protocol analysis tool
such as tcpdump, Ethereal, Wireshark, etc. One can refer to
the switch vendor's documentation for this purpose.
The common command on Cisco equipment
is 'SPAN' or 'RSPAN' for mirroring packets.
