NetSkate Visualizer Q&A


Last Update: 2008/07/15

Installation/Settings

Functions/Applications

Technical Information

Troubleshooting


Installation/Settings


Which OS is supported?


Refer to ‘supported OS/working environment’ of our products page.

Top

Which JRE Version is supported?


The server, client and standalone will be provided with the JRE to be installed along with the product, so there is no need to get another JRE

In environments where the JWS version and the applet version clients will be used, please use the most recent Sun J2RE 1.4 type. Sun J2RE can be downloaded free of cost from the URL below.

Top

Is it possible to install and use a product in multiple machines?


With one license, installation is possible on only one machine.
Top

Is it possible to monitor different systems, for example one with a UNIX server and another with Windows server?


Information collection and threshold monitoring is done by utilizing SNMP, so even if UNIX and Windows are mixed, as long as the target SNMP agent is installed, monitoring is possible.
Top

Is there an upper limit to the number of nodes monitored? In such case, what is the license fee like?


There is no upper limit to the number of monitoring target nodes in real time.

However, when NetSkate Visualizer Pro is used to store observations on disks, one Additional Agent License of NetSkate Archiver is required for each target agent.
Top

Is it necessary to purchase an agent license even while monitoring by PING and HTTP? [NEW]


No, it is not required.

An agent license is required only when information collected by SNMP is accumulated, and only for each target SNMP agent.
Top

What is the maintenance cost?


Please inquire separately regarding maintenance cost.

Top

What is the required bandwidth (up and down, how many Mbps each), between the client and the manager?


Bandwidth around 64 kbps is required.
Top

Is it necessary to stop monitoring while upgrading software?


It is necessary to pause monitoring, upgrade the software, and then start monitoring.
Top

How do you back up data for a quick recovery?


Everything under the installation directory can be copied to a separate path to ensure total backup.
Top

Functions/ Applications


Is it possible to customize items for traffic information?


It is possible to edit the MODescription.conf settings file and change the items and labels independently.

(Please refer to : NetSkate Visualizer Pro Reference Manual-Section- 13.1.5 ‘MODescription.conf’)
Top

Is there a display function for alarms from agents like SNMP Trap/Syslog etc?


There is a function to receive and display SNMP Trap and Syslog in Visualizer Pro.
Top

What are the different types of SNMP Traps supported?


Traditionally, all sorts of SNMP Traps have been supported by Visualizer Pro.

Traps from snort supporting SNMP can display more detailed information from the Rule ID etc.

(Please refer to :Reference Manual ‘6.2 NetSkate Event Console’)
Top

Is it possible to customize detected information (of failures etc) and send an SNMP Trap to an alternate server?


With respect to traffic monitoring etc, threshold values and conditional actions can be set and mails or SNMP traps can be sent from those values and conditions.

There is no function in place to work on information received from SNMP Traps and to send a Trap to a different server.
Top

Is it possible to carry out commands in addition to mail communication during an event outbreak?


Currently, only SNMP Traps and mail sending are supported. With respect to carrying out commands, support is under review.
Top

Is it possible to refer to a file rather than a screen for checking when SNMP Communication appears to have been severed?


The following files can be copied at the location where Visualizer has been installed.

・data\snmpReachability.values

The format is ‘Host: Biggest, Smallest, Average, Current Value’. When no SNMP response is forthcoming, the value becomes ‘-1’/
192.168.0.4 : 2459 4 24 6

Top

On the network map, the switch is displayed as a PC. How can this be changed?


You will need to use our company’s product ‘NetSkate Designer’.

Register NetSkate Designer’s license code in Visualizer, You can edit the map directly on Visualizer and this enhances the usability of NetSkate Visualizer
Top

How can the layout of the automatically generated map be changed?


You will need to use our company’s product ‘NetSkate Designer’.

Register NetSkate Designer’s license code in Visualizer, You can edit the layout directly on Visualizer and this enhances the usability of NetSkate Visualizer
Top

Is it possible to add and delete objects to be monitored on the automatically generated network map?


You will need to use our company’s product ‘NetSkate Designer’.

Register NetSkate Designer’s license code in Visualizer, You can add and delete objects directly on Visualizer and this enhances the usability of NetSkate Visualizer
Top

How can the network search range be set during automatic network map generation?


It is possible to control the network search range by setting the host.lst file. This file exists in the config\explorer directory in the installation directory of the Visualizer server. Set the target IP address, or the range, in this file. Refer to the examples below for the format. After editing, save the settings and restart the Visualizer server. The network map generated will be limited by the range set in host.lst file.

or more details refer to the following manuals:

・‘NetSkate Visualizer Installation Guide’, Section- 10.1 host.lst editing
・‘NetSkate Visualizer Reference Manual’, Section- 13.1.4 host.lst

Example 1:
  While assigning the network range, specify ‘network address/network mask length’

  192.168.0.0/24

Example 2:
  While specifying the single host, assign ‘host address/32’.
  192.168.0.1/32

Example 3:
  While assigning multiple targets, state one network range per line.
  192.168.0.0/24
  10.0.0.0/24

Top

During network map preparation, is there any danger of an SNMP being automatically sent to the terminal of an external connection (IX, communication carrier, etc)? Won’t that cause a leak in the SNMP access information of the office?


It is possible to limit the search range addresses using the host.lst settings file. Please set accordingly after referring to ’13.1.4 host.lst’ of the manual.

On the screen during network map generation, all the IP addresses trying to carry out SNMP access will be displayed. After careful verification, activate the checkboxes to permit access.
Top

What is the difference between ‘Transferring Interface’ and ‘Ping Reachability’ on the network map? What is the interpretation of PC status in blue and Interface status in green, PC in blue and gray, PC in green and Interface in blue?


Visualizer. is designed to monitor each element of PC/Interface, independently.

‘Interface running’ (green) displays the result after checking the status of each interface with respect to the host’s SNMP access. This doesn’t reflect reachability monitoring, but the ‘IF status’ function display.

‘Ping reachability’ (blue) reflects the results of monitoring Ping reachability of the IP address defined for each interface.

When PC status is blue and Interface status is green, the Ping reachability check of the IP address assigned to the PC was successful and the IF status is displayed and the Interface is activated.

When the PC status is blue and the Interface status is gray, the Ping reachability check of the IP address assigned to the PC was successful but the IF status was not displayed, and the Ping reachability check for the IP address assigned to the Interface was either not defined, or no IP address was assigned to the Interface.

When the PC status is green and the Interface status is blue, SNMP access by the IP address of the PC was successful, and the Ping reachability check of the IP address assigned to the Interface was successful.
Top

Is it possible to Zoom-in and Zoom-out the network map?


The current version doesn’t support magnification and compression. The function is currently under consideration for development.
Top

Is hierarchization of the network map supported?


The current version doesn’t support hierarchization. The function is currently under consideration for development.
Top

I bought Designer Pro and incorporated the license into Visualizer, but when I invoke it in the editing function of the map it is displayed ‘Designer’.


Though it may be displayed in the title bar as ‘NetSkate Designer’, the function is that of Pro.
Top

How can chairs and office layouts be added while editing the map?


In ‘add’ menu -> ‘details’ -> ‘non network elements’, you can choose each element.
Top

Are expressions like M (mega) and K (kilo) in the disk space and traffic displays accepted?


The current version doesn’t support this. It is currently under consideration for development
Top

How is the spacing of grid lines in the real-time graphing function decided?


The grid lines have been set to display every 100 points. Depending on the update interval of the graph, the actual grid line intervals change as shown in the following examples:

(Example 1) graph update interval is ‘5 seconds’ …grid line interval is ‘500 seconds’
(Example 2) graph update interval is ‘1 minute’…grid line interval is ‘100 minutes’
Top

Can the displayed graph of HTTP and SNMP response time be printed? How can the displayed data be exported to CSV format?


In the current version, only the Windows screen hard copy function can be used. The function is currently under consideration for development.
Top

In the graph display (real-time), does accession of traffic by SNMP in the background stop on closing the window? How can a closed graph be opened again?


The closing of the window means the end of observation, and hence information collection is stopped. If you need to reopen the graph, please use the ‘minimize’ button.

Using the ‘Save current screen configuration’ function, it is possible to display the necessary graphs again on restarting.

In addition, when the archiving option is ON in the Pro version, regardless of whether the graph is displayed on the client or not, unless stopped explicitly, information collection is continued.

Control of information collection can be done using the ‘Poller status’ function.
Top

After setting monitoring of SNMP and Ping, does monitoring by the server continue after dropping a client?


Yes, while the Visualizer server is operating, reachability monitoring continues, and warnings will be communicated.
Top

Is the value of traffic displayed in the user status/user order function the same as that at the time of invoking the function?


In this function, the observed traffic value collected from the CpMonitor is converted into bps and displayed. In the CpMonitor, the observation results are added up according to the interval (set in advance) and update the traffic value.

CpMonitor collects information when this function is invoked, but the values which it collects are not the instantaneous values, but the latest values.
Top

Does CpMonitor store data?


Data used by Visualizer for graphs and records are all stored in the Visualizer server. CpMonitor does not store data.
Top

When trying to read accumulated data with the graph display (record) function, why are the intervals sometimes different from that set during collection?


Visualizer is designed to collect data according to the intervals set, as far as possible, but due to network delays and load on the Visualizer server machine or SNMP agent, the intervals may vary.

The interval value displayed in this feature are calculated based on the actual data, and hence may reflect the variations during data collection.
Top

What is the data volume required for graph display (record)?


Approximate data volume for one interface under monitoring will be as follows:

(Example 1) 60 second intervals -> 36 Kb / day
(Example 2) 5 second intervals -> 432 Kb / day
Top

What can you refer to, to determine whether archived data is present in the graph display (record)?


Presently there is no provision for the user to verify the availability of the archive data. This function is currently under consideration for development.

Data being collected can be determined by checking for a ‘true’ on the archive item on the Poller status function.
Top

What is the output limit of the reports of CSV, text, etc.?


The data on the NetSkate event console can be displayed in CSV format. Traffic information is stored in a simple text format, and can easily be reused.
Top

What is the difference between the event console and the event viewer?


The event console function has integrated different types of event viewer, and has CSV export as an added feature.

The various types of event viewer have been retained for maintaining compatibility with the old version. However, this will be discontinued altogether in future.
Top

Can the IP address or host name, etc, of nodes that failed to reach, be displayed on the event console?


Choose ‘Threshold monitoring result’ in ‘Select display type’ to get the display.
Top

Can the value of MIB acquired by SNMP be displayed on the event console?


On the NetSkate event console interfaces up to OID are displayed, but if you double click each Trap message interfaces up to MIB are displayed.
Top

Is there a feature enabling ranking and color coding of events on the event console?


Color coding is possible by the ‘importance’ setting. By default 5~7 is colored yellow and 8~9 red.
(Customization is possible by settings in the configuration file. Please Refer to ’Section -13.1.7 ImpactColor.conf’ of the manual)
Top

Is it possible to make unreachable red and reachable after recovery as green on the event display of the event console?


It is possible to assign different degrees of importance (color) according to rule, but unreachable/recovery are the beginning/end of a single rule, so it is not possible to assign different colors to each of them.

The function is currently under consideration for development.
Top

I don’t know how to set the event monitoring rule which will generate an event when the traffic at a specific interface crosses a threshold value. There are ifOutOctets and ifInOctets, but objectively, what numerical value should I set?


The traffic (bytes) that flows into the interface is ‘ifInOctets’ and the one that leaves is ‘ifOutOctets’.
These values are in bytes, so it is necessary to change from the value to be assigned in bps and set the threshold.

For example, when there is an average of 1Mbps over 5 seconds, a warning needs to be issued.

There is 1 Mbit in 1 second, so that becomes 5 Mbits in 5 seconds.
1 byte = 8 bits, so 5 Mbits =5,000,000/8 = 625,000 bytes

So basically the following settings need to be done:

Interval = 5 seconds
Managed object = ifInOctets
Compare to value = 625000

Top

When accessing the Visualizer server using the Visualizer client, is there an authentication function?


At the time of logging in, there is a password authentication
Top

Is there a backup for the event when the service (or demon) of the Visualizer Server stops?


The present version does not support this function.

We are currently considering this function for development (i.e. multiple startup of processes, periodic process checks, etc.)
Top

Technical Information


Which command carries out disk monitoring?


Resource MIB of the host will be referred to for SNMP. (RFC1514).

During disk monitoring, the disk part of the MIB of the host resource is used.

The screen below shows the alert displayed when disk size or available disk space is greater than 0.8.
[監視設定画面例]
Top

Is there a catalog or pamphlet or technical brochure explaining functions supported by NetSkate Visualizer?


Please refer to feature comparison table’ of our company’s product page.

Top

Is there a comparison data with products of other companies?


We apologize for the inconvenience, but please contact the sales and marketing team of our company separately.

Top

Is the snmpwalk command used in the product?


We do not use the snmpwalk command. All collection of information by SNMP is carried out by an internal code.
Top

What are the benefits of using Snort (or conversely the disadvantages of not having Snort)?


By placing Snort at the periphery of the network, it is possible to detect network attacks that pass through the boundary.

In Visualizer Pro, it is possible to display SNMP Traps from Snort in Real-Time.
Top

When undelivered Ping and SNMP are detected by the reachability monitoring function, is it displayed in the event console, without any time lag?


In theory there is no time lag between detection and display, but depending on the load on the manager-console network, there may be some unavoidable delay.
Top

Troubleshooting


When starting the Visualizer Server, the error message ‘network service could not be opened. Please check settings’ was displayed, and it could not start.


NBy default the NetSkate Visualizer Server will carry out communications with the client on port 1099 of TCP,

If the port was already used prior to start up of the Visualizer Server, the Server will not be able to start and an error will be displayed.

It will be necessary to stop the current application or change operation to another port, or assign a different port number from the Visualizer Server.

To assign a different port number, edit the config\ports.conf file of the directory in which the server was installed.( Please refer to Section-13.1.6 ‘ports.conf’, NetSkate Visualizer Reference Manual)
Top

When starting the Visualizer Server, the error message ‘unable to start server (Service: Syslog receiver causes SocketException: Address already in use)’ was displayed and it could not start.


This error occurs due to port conflict, if the syslog service is already open on the machine in which Visualizer Server will be started. This can be rectified by using any one of the two methods listed below:

  1. Change the port number used by the syslog receiver service(Please Refer to Section 13.1.3 ‘Syslog Receiver.conf’, NetSkate Visualizer Pro Reference Manual)

  2. Don’t start the syslog receiver service

    Set the following options in the startup script


The specific method for the latter is below

[Windows version]
Add the following line to the NetSkate_Visualizer_Pro-Server.lax file in the folder where Visualizer Server is installed. (The following should be one line)

lax.nl.java.option.additional=-Dcom.cysols.service.syslog.module.server.SyslogReceiverService=false

[Unix version]
VAdd the aforementioned option as shown below to the VisualizerServer.sh file in the directory in which Visualizer Server is installed.

#!/bin/sh
jre/bin/java \
-Dcom.cysols.service.syslog.module.server.SyslogReceiverService=false \
-Djava.awt.headless=true -cp \
"visualizer_server.jar:lib/mail.jar:lib/activation.jar:plugin/pro_server_plugin.jar" \
com.cysols.visualizer.server.VisualizerServer

Top

On a UNIX machine, when carrying out ‘./VisualizerServer.sh’, ‘Visualizer Server started…’ was displayed but is not returned to command prompt.


VVisualizer Server doesn’t have a function to change over to a backend process, so please add “&” as shown below and start it as a backend process.

# ./VisualizerServer.sh &

Top

On a Windows machine, the Visualizer server was started, and a client installed on a separate machine could use it normally, but after log-out the connection was abruptly broken and it could not be used. Both machines were restarted but they did not recover.


On Windows, if the server was manually started, the server will stop when the account is logged out from client. During normal installation there is no setting for automatic startup during system startup.

To set automatic startup, carry out the operation mentioned in section ‘11.1 Converting NetSkate Visualizer Server for Windows service’ of the Installation Guide, and set the ‘startup type’ of the service to ‘automatic’.
Top

On the network map generation function, there is a device which is not detected.


Since the maps are generated using ARP tables of machines accessible by SNMP, any device that does not carry out communication with those machines at the time of generation may not be reflected in the network map. In such situations, if a PING or some other communication is carried out with a device that you would like to detect, prior to map generation, this problem may be solved.

Another possibility is that the device you are trying to detect may be outside the range of detection. Please refer to section ‘13.1.4 host.lst’ of the Reference Manual and set the detection range as per requirement, and then restart the network map generation.
Top

After automatically generating a network map, the SNMP reachability monitoring was activated, but many hosts respond as ‘unreachable’. SNMP reachability is being checked manually from the automatic map generator.


SNMP access information supported by each node will not be recorded just by generating a map. In this case, SNMP access will be carried out by default by version 2c, community name public. All inaccessible objects will be treated as ‘unreachable’ with this access information.

To record SNMP access information supported by each node, either check ‘set SNMP access parameters’ in the dialog after map generation, or manually set SNMP parameters for the IP addresses of the hosts for which you would like reachability monitored in the ‘SNMP access parameter editor’ separately.
[SNMP アクセスパラメータ設定画面]
Top

When generating a network map for a network with a few tens of network nodes, the process was slow and stopped midway through the probe.


When carrying out SNMP access recursively for large numbers of terminals, time taken for processing increases with the number of terminals.

When there are terminals which do not respond to SNMP or Ping, more time will be taken due to retries and timeout.

Please wait till the process is completed.
Top

The label change process is given in 3.3.1 of the user manual, but ‘label change’ is not listed in the drop down menu after right clicking a network map element.


While using this function, right click on any area of the map except the map elements.
[ラベル変更画面]
Top

How can a network map be generated by Designer with its nodes color coded to reflect the reachability monitoring target status?


Ensure that the following actions are carried out in the sequence given below.

  1. Set the correct IP address and subnet mask of the appropriate PC node while editing the map

  2. 2. Set the Ping reachability monitoring corresponding to the set IP address


Once the monitoring starts, the status on the map will change.
Top

Events displayed in the event console were hidden after setting ‘display type selection’ and ‘data type selection’. Even after changing display type to ‘default’ and ‘display all’ they remain hidden.


This problem occurs when the default operating port number of Visualizer is set to different values in the server and client.

To avoid this problem, set the same number in the ‘RMI_PORT’ in the ‘ports.conf’ of the server and client. (Please refer to section-10.3 editing ports.conf, Installation Guide)
Top

After screening CpMonitor with the user status/order function (real-time), an item called Delta was displayed for each interface, but other information could not be displayed.


After screening CpMonitor with the user status/order function (real-time), an item called Delta was displayed for each interface, but other information could not be displayed.

Incidentally, since Counter is for long-term statistical information collection and outside the target output of this function and Average is scheduled to be removed, information from these cannot be exported by Visualizer.
Top

I want user status (records) to be displayed but even though I clicked on one that should have information it displayed an error saying ‘the data you wanted could not be found’


This problem is under evaluation and rectification process is on.
This occurs mainly when the input is in the form of attached images. In ‘Managed Object Name’, ‘OutBytes.2’ gets supplemented erroneously. This can be manually corrected to ‘ifOutOctets.2’. Continue the process and you can get the required display

We deeply apologize for the inconvenience and assure you that it will be rectified shortly.
Top