Infrastructure Devices

Located at Configuration > Infrastructure Devices.

Actions

Add Device

To add a new infrastructure device:

• Enter the IP address.
• Enter the SNMP community.
• Click Save to save changes.

Add Bulk Devices

To bulk-add new devices, i.e. more than one device at a time:

• Enter device information using the format:

ip 

or

ip, communityString 

or

ip, communityString, deviceName

Use a new line for each new device added.

Recheck Forensics

Recheck Forensics by clicking Refresh .

Extended Stats

This shows a more detailed version of the Existing Devices table, with additional statistics for each device.

Existing Devices

The Existing Device(s) table lists all connected infrastructure devices.

You can select how many of the devices to view, i.e. the most recent 10, 25, 50, 100 or all devices.

At the top of the table, the total number of infrastructure devices is given. You can also search for a particular device. Each column is sortable. The table displays interactive information, including:

• Device ID. To view a detailed overview of this device, click on the IP. See the next section, Detailed Device Information. The Device ID is assigned when the system receives a flow or syslog from it for the first time.
• Device IP address. It is good practice to ensure that the source address is fixed, ideally, to a VLAN or management VLAN address. Otherwise, multiple entries might be created for each alternative pathway.
• SNMP IP: IP address for SNMP access.
• Device name. To change the device name, enter a new name and click Save . This defaults to the IP address or the SNMP system name if this exists. Both can be overwritten.
• SNMP state, up or down. This indicates whether or not the sender can be polled for more information. To refresh the SNMP state, click Refresh .
• Number of associated Layer-3 interfaces.
• Number of VLANs.
• Number of ARPs.
• Number of BPNs.
• Number of CAM (latest).
• Number of CAMs.
• Number of LLDPs.
• Number of Drops.
• Flows per second. This is GigaFlow's current flow processing rate.
• Number of Flows. This is the total number of flows received by GigaFlow since the last reset or restart, not including duplicates.
• Sampling rate.
• Trigger. This is the flow resolution used in the flows per second calculation.
• Associated Netflow templates.
• Number of forensics.
• Stored MB. This is the storage used for the sender's flow/syslog information.
• GBs. This is the storage limit for the sender's flow/syslog information. When this limit is exceeded, the system will purge the oldest entries.
• Oldest entry.
• Store (yes or no.) See also System > Global > Storage. If the sender's flows/syslogs are stored or not. If not, they will be checked, still, against blacklists and Profilers.
• Associated System Object Identifier (SysOID).
• Number of duplicate flows discarded (if any).

Device SNMP Mapping

The Device SNMP Mapping table displays:

• System Object Identifier (SysOID).
• Poller. To change the poller, select from the drop-down list and click Save .
• The number of devices using this SysOID.
• A description of the system, e.g. Gigabit Smart Switch.