Manageengine Netflow Analyzer Installation Guide [ 99% DELUXE ]

Set Java heap memory based on RAM. For 16 GB system, allocate 8–10 GB for the analyzer. This is critical for avoiding out-of-memory errors.

interface GigabitEthernet0/1
 ip route-cache flow
!
ip flow-export version 5
ip flow-export destination 192.168.1.100 2055

(Replace 192.168.1.100 with your NetFlow Analyzer server IP)

| Problem | Solution | |---------|----------| | Port 80/443 already in use | Stop IIS (iisreset /stop) or Apache. Change ports during install. | | Java out of memory error | Edit bin/netflow.sh (Linux) or bin/netflow.bat (Windows): increase -Xmx value (e.g., -Xmx4096m). | | No flows appearing | Verify device is sending flows (debug ip flow export on Cisco). Check firewall (UDP 9999/2055). | | Web UI slow | Increase RAM allocation and move database to SSD. | | Installation fails on Linux | Ensure libc6 and libssl are installed. Use --force if needed. | manageengine netflow analyzer installation guide

NetFlow Analyzer ships with a bundled PostgreSQL database.


  • Configure Flow Export on Routers:
  • Before you begin, verify the following:

    | Requirement | Details | |--------------|---------| | Operating System | Windows (Server 2016/2019/2022) or Linux (CentOS/RHEL/Ubuntu/Debian) | | CPU | 4+ cores (8+ recommended for >1,000 flows/sec) | | RAM | 8 GB minimum (16–32 GB for production) | | Disk Space | 100 GB minimum (depending on retention) | | Database | Built-in PostgreSQL (or external MSSQL/PostgreSQL) | | Browser | Chrome, Firefox, Edge, or Safari (latest versions) | | Ports | 80 (HTTP), 443 (HTTPS), 9999 (default NetFlow receiver), 2055 (sFlow) |

    Note: For production environments with high flow rates, use a dedicated server and SSD storage. Set Java heap memory based on RAM

    | Check | Command/Action | |-------|----------------| | Service status | Windows: Services → NetFlow Analyzer
    Linux: ./netflow.sh status | | Processes | java (NetFlow Analyzer) and postgres | | Port listening | netstat -an | grep 9999 (Linux) or netstat -an | findstr 9999 (Windows) | | Web access | Open browser to https://<server-ip> | | Flows received | Dashboard → Traffic panel shows live data |