![Page 1: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/1.jpg)
Copyright © 2002 OSI Software, Inc. All rights reserved.
PI-NetFlow and PacketCaptureEric Tam, OSIsoft
![Page 2: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/2.jpg)
Topics
• Background material– TCP/IP network traffic– router functionality– Cisco routers and NetFlow protocol
• PI-NetFlow Interface and PacketCapture– practical applications
• Questions– please wait until the end of the presentation
![Page 3: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/3.jpg)
Network Traffic
Internet Information Server
Internet Explorer
Web Client Web Server
![Page 4: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/4.jpg)
Network Traffic
PINetMgr PIArchss etc.PI-ProcessBook
PI Client PI Server
![Page 5: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/5.jpg)
TCP/IP Network Traffic
PI-ProcessBook
Internet Explorer
PI Server
Web Server
TCP/IP
TCP/IP
![Page 6: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/6.jpg)
IP Addresses• All TCP/IP network traffic is based on IP
addresses
Internet Explorer Web Server
TCP/IP
192.168.10.161 10.12.18.67
![Page 7: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/7.jpg)
Multiple Network Programs
Internet Explorer
Web Server
PI-ProcessBook PI Server
• More than 1 client program on a machine• More than 1 server program on a machine• Network traffic confusion?
10.12.18.67192.168.10.161
![Page 8: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/8.jpg)
Port Number
• Helps defines the application for the network traffic
• Server programs– Port number is defined by the program itself,
sometimes at runtime (i.e., user configurable)– PI : 5450 or 545– Web server : 80
• Client programs– Port number is assigned by operating system
![Page 9: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/9.jpg)
Multiple Network Programs
Internet Explorer Web Server
10.12.18.67192.168.10.161
PI-ProcessBook PI Server
192.168.10.161 : 2024 10.12.18.67 : 80
192.168.10.161 : 1026 10.12.18.67 : 5450
![Page 10: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/10.jpg)
TCP/IP Protocols
• TCP, UDP, ICMP– Chosen by the application developer– Protocol and port number define network application
• TCP– PI; port 5450 or 545– Web browsing (HTTP); port 80
• UDP– Network management (SNMP); ports 161 and 162
• ICMP– No port numbers involved– Ping
![Page 11: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/11.jpg)
Summary of TCP/IP Traffic
• All TCP/IP traffic has these attributes– Source address (e.g., 192.168.10.161)
– Source port (e.g., 2024)
– Destination address (e.g., 10.12.18.67)
– Destination port (e.g., 80)
– Protocol type (e.g., TCP )
– Size (e.g., number of bytes)
![Page 12: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/12.jpg)
Router Functionality
10.12.18.67192.168.10.161
San Diego Chicago
![Page 13: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/13.jpg)
Router Functionality
192.168.10.161
10.12.18.67
192.168.10.1
10.12.18.1
San Diego
Chicago
router
![Page 14: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/14.jpg)
Router Functionality
Source address: 192.168.10.161192.168.10.161
10.12.18.67
Internet Explorer
Web Server
Source port: 2024
Destination address: 10.12.18.67
Destination port: 80
Protocol: TCP
routerSan Diego
Chicago
Bytes: 100
Attributes of TCP/IP traffic:
![Page 15: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/15.jpg)
Cisco Routers and Data Aggregation
100 bytes
120 bytes
2100 bytes
Web server
5300 bytes
10.12.18.67 : 80
3. 192.168.10.161 : 2024 10.12.18.67 : 80
2. 192.168.10.161 : 2024 10.12.18.67 : 80
4. 192.168.10.161 : 2024 10.12.18.67 : 80
1. 192.168.10.161 : 2024
![Page 16: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/16.jpg)
Cisco Routers and Data Aggregation
Web server
100 bytes
120 bytes
2100 bytes
5300 bytes
10.12.18.67 : 80
3. 192.168.10.161 : 2024 10.12.18.67 : 80
2. 192.168.10.161 : 2024 10.12.18.67 : 80
4. 192.168.10.161 : 2024 10.12.18.67 : 80
1. 192.168.10.161 : 2024
![Page 17: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/17.jpg)
NetFlow Data Aggregation
Source address: 192.168.10.161Source port: 2024Destination address: 10.12.18.67Destination port: 80Protocol: TCPBytes: 220 (100+120)
The 4 previous individual messages result in 2 NetFlow records
Source address: 10.12.18.67Source port: 80Destination address: 192.168.10.161Destination port: 2024Protocol: TCPBytes: 7400 (2100+5300)
ServerClient
Server Client
![Page 18: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/18.jpg)
NetFlow Data Export
Source address: 192.168.10.161Source port: 2024Destination address: 10.12.18.67Destination port: 80Protocol: TCPBytes: 220 (100+120)
Source address: 10.12.18.67Source port: 80Destination address: 192.168.10.161Destination port: 2024Protocol: TCPBytes: 7400 (2100+5300)
NetFlow Data Collector
Web server
IE
![Page 19: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/19.jpg)
Cisco Routers and Data Aggregation
100 bytes
120 bytes
2100 bytes
Web server
5300 bytes
10.12.18.67 : 80
3. 192.168.10.161 : 2024 10.12.18.67 : 80
2. 192.168.10.161 : 2024 10.12.18.67 : 80
4. 192.168.10.161 : 2024 10.12.18.67 : 80
1. 192.168.10.161 : 2024
Internet Explorer
![Page 20: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/20.jpg)
Cisco NetFlow Data Export
NetFlow Data Collector
Continuous export of real-time network traffic information:
source addresssource portdestination addressdestination portprotocolbytes
Web
PI
ProcessBook
Outlook
IE
![Page 21: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/21.jpg)
Real-time Network Monitoring
PI-NetFlow Interface
Web
PI
ProcessBook
Outlook
IE
PI Universal Data Server
![Page 22: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/22.jpg)
PI-NetFlow Interface• PI-NetFlow filters NetFlow records before writing
values to PI
PI-NetFlow PI Universal Data Server
NetFlow records contain information on all traffic seen by the router
filtered values
![Page 23: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/23.jpg)
Use of PI-NetFlow at OSIsoft
Mail server
PI-NetFlow Interface
PI Universal Data Server
Web server
Support server
FTP server
Internet
(Monitoring usage for specific servers)
![Page 24: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/24.jpg)
Demonstration
![Page 25: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/25.jpg)
Use of PI-NetFlow at OSIsoft
Mail server
PI-NetFlow Interface
PI Universal Data Server
Web server
Support server
FTP server
Internet
(Monitoring usage for specific servers)
![Page 26: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/26.jpg)
Expanding the Power of PI
• Practical applications for PI-NetFlow• Ability to monitor and manage your
networking infrastructure
![Page 27: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/27.jpg)
How Much Traffic Is PI-related?
DataLink
(record traffic whose source or destination port is 5450 / 545)
ProcessBook
PI-NetFlow Interface
PI Universal Data Server
PI
PI
WAN
![Page 28: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/28.jpg)
Billing Applications
PI-NetFlow Interface
PI Universal Data Server
Sales
Marketing
Engineering
Internet
(determine which department is using Internet connection the most)
![Page 29: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/29.jpg)
Detection of Illegal Inbound Traffic
Web server 1
PI-NetFlow Interface
PI Universal Data Server
Web server 2
Web server 3
Web server 4
Internet
(record traffic whose destination port is 80)
![Page 30: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/30.jpg)
Detection of Illegal Outbound Traffic
PI-NetFlow Interface
PI Universal Data Server
Internet
(record traffic to unauthorized Internet sites)
![Page 31: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/31.jpg)
Limitations of PI-NetFlow?
Web
PI
ProcessBook
Outlook
IE
PI-NetFlow Interface
PI Universal Data Server
NetFlow module
![Page 32: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/32.jpg)
Limitations of PI-NetFlow?
Web
PI
ProcessBook
Outlook
IE
PI-NetFlow Interface
PI Universal Data Server
Web Server
![Page 33: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/33.jpg)
PI-NetFlow Limitations
• So, PI-NetFlow cannot monitor network traffic if– No Cisco router in the network– Cisco router exists, but NetFlow does not– Router is not involved
• What to do?
![Page 34: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/34.jpg)
Summary of TCP/IP Traffic
• All TCP/IP traffic has these attributes– Source address (e.g., 192.168.10.161)
– Source port (e.g., 2024)
– Destination address (e.g., 10.12.18.67)
– Destination port (e.g., 80)
– Protocol type (e.g., TCP )
– Size (e.g., number of bytes)
![Page 35: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/35.jpg)
Ethernet Segment – Party Line!
192.168.10.6
192.168.10.20
192.168.10.5
With the proper application, 192.168.10.5 can see the attributes of all TCP/IP traffic on the segment:
192.168.10.6 : 1026
192.168.10.20 : 5450
192.168.10.6 : 1124 10.12.18.67 : 80
10.12.18.67
![Page 36: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/36.jpg)
Packet Capturing
192.168.10.6
192.168.10.20
192.168.10.5
10.12.18.67
1. See/capture traffic2. Aggregate traffic information (source
IP, source port, etc.)3. Create records of NetFlow format
![Page 37: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/37.jpg)
OSIsoft PacketCapture
192.168.10.6
192.168.10.20
192.168.10.5
10.12.18.67
1. See/capture traffic2. Aggregate traffic information (source
IP, source port, etc.)3. Create records of NetFlow format
PacketCapture
PI-NetFlow Interface
PI Universal Data Server
![Page 38: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/38.jpg)
PacketCapture with PI-NetFlow
• No need for a foreign (i.e., non-OSIsoft) device to supply the data
• Monitor traffic on different LAN segments• Monitor traffic that does not go through a
router
![Page 39: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/39.jpg)
Monitor PI-Interface Traffic
OSIsoft PacketCapture
PI-NetFlow Interface
PI Universal Data ServerPI-ICCP Interface
SCADA system
![Page 40: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/40.jpg)
Use with Network Gateways
OSIsoft PacketCapture
PI-NetFlow Interface
PI Universal Data Server
Internet
gateway withoutNetFlow
![Page 41: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/41.jpg)
Use in Small Office / Home Office
OSIsoft PacketCapture
PI-NetFlow Interface
PI Universal Data Server
Internet
DSL / cable modem
Keep track of Web sitesvisited by your kids!
![Page 42: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/42.jpg)
Expand the Power of PI
• Discover the network management capabilities of a PI System!
• Demonstration room Tuesday afternoon
![Page 43: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/43.jpg)
Questions and Answers
• Availability?– Approximately 1 month from now
• Contact information– OSIsoft sales representative– Eric Tam (software developer of PI-NetFlow)
• Email: [email protected]• Phone: 1-510-297-5803
![Page 44: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/44.jpg)
Additional Information
• Next slides provide additional information that may be helpful in understanding the details of PI-NetFlow and PacketCapture
![Page 45: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/45.jpg)
Data Collection Example• Want to monitor traffic sent to and from machine
with IP address of 192.168.10.79
– Tagname: 192.168.10.79_usage
– Filtering condition 1• destination IP: 192.168.10.79
– Filtering condition 2• source IP: 192.168.10.79
![Page 46: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/46.jpg)
Data Collection Example• Want to monitor traffic sent to and from machine
with IP address of 192.168.10.79– Tagname: 192.168.10.79_usage– Filtering condition 1
• destination IP: 192.168.10.79
– Filtering condition 2• source IP: 192.168.10.79
• For every NetFlow record received, PI-NetFlow– Applies the user-specified filtering conditions– Calculates a running sum of the number of bytes in those
records that satisfy criteria– Periodically writes this sum to 192.168.10.79_usage
![Page 47: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/47.jpg)
Value Written to PI
bytes
seconds
individual NetFlow records that satisfy filtering conditions srcIP = 192.168.10.79or destIP = 192.168.10.79
value written to PI tag192.168.10.79_usage
5 10 15
![Page 48: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/48.jpg)
Data Collection Example
• “Base” tag – running sum of bytes– Created by the user– 192.168.10.79_usage
• “Detail” tags – fields of NetFlow records– Created by PI-NetFlow itself– Tagnames are derived from “base” tag– 192.168.10.79_usage_detail_srcIP– 192.168.10.79_usage_detail_srcPort– 192.168.10.79_usage_detail_destIP– 192.168.10.79_usage_detail_destPort– 192.168.10.79_usage_detail_octet– 192.168.10.79_usage_detail_prot
![Page 49: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/49.jpg)
PacketCapture Limitations
• Standard Ethernet only, won’t see traffic on– dial-up connections– ATM networks– token ring networks– fibre networks
• Captures only the traffic that it sees– Won’t see traffic for other machines if switched
network is involved
![Page 50: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/50.jpg)
Comparison of Programs
• PI-NetFlow– PI interface program; uses PI-API and PI-SDK– Receives NetFlow records sent by an external
device (e.g., Cisco router or PacketCapture)– Writes values to PI tags
• PacketCapture– Not an interface; does not use PI-API or PI-SDK– Measures TCP/IP traffic on Ethernet– Creates and sends NetFlow records– Not a replacement for Cisco NetFlow
![Page 51: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/51.jpg)
Hub vs. Switch
OSIsoft PacketCapture
PI-NetFlow Interface
PI Universal Data Server
OSIsoft PacketCapture
PI-NetFlow Interface
PI Universal Data Server
![Page 52: Copyright © 2002 OSI Software, Inc. All rights reserved. PI-NetFlow and PacketCapture Eric Tam, OSIsoft](https://reader035.vdocuments.us/reader035/viewer/2022062516/56649e305503460f94b20e9e/html5/thumbnails/52.jpg)
Managed Switch
OSIsoft PacketCapture
PI-NetFlow Interface
PI Universal Data Server
spanning port