FAQ

Note

For additional questions or concerns, contact Plixer Technical Support.

Can we use additional Replicators as failsafes against downtime and other issues?

Yes. For instructions on how to configure a secondary or backup Replicator appliance see the section on high availability configurations.

Why is our Replicator still not receiving packets from our router even though I've configured it to send data to the correct IP address?

A firewall or access control list may be blocking traffic to the Replicator appliance. To verify that it can see traffic from a device, run snoop [NETWORK_DEVICE_IP] from the REPLICATOR> prompt.

Can I create additional admin and/or user accounts for other users in our organization?

Each Replicator appliance currently only supports a single adminstrator account for the web interface. However, future updates to the product may add support for multiple local user accounts and roles.

How long should it take for collectors to start receiving packets after I've configured an exporter to send flows to the Replicator appliance?

When a new exporter starts sending UDP packets to the Replicator appliance, it may take up to two minutes for the packets to be received by collectors.

How do I find out if there are exporters not assigned to any profiles sending packets to the Replicator?

To view all currently unassigned exporters, select Exporters Not in a Profile in the View dropdown menu in the Exporters tab of the web interface or run exporters noprofile from the REPLICATOR> prompt.

We have a closed network with no gateway. Why is our Replicator appliance dropping packets instead of replicating them?

The default behavior for the Replicator appliance is to drop all packets that come into an interface that the host has no route to. To change this, find the net.ipv4.all.rp_filter setting in the /etc/sysctl.conf file and change its value to 0.

How do I configure a profile to allocate exporter flows across a distributed Scrutinizer cluster?

If you are using Scrutinizer’s distributed architecture to handle an extremely large number of flows and/or exporters, you can enable the Auto Replicate feature to have it manage Replicator profiles for its collectors and automatically assign exporter streams to them as they’re added. Additional information and instructions on how to set up Replicator integration can be found in the Scrutinizer documentation here.

Do Replicator appliances support IPFIX?

Yes, IPFIX is supported.

Can I convert syslog messages to IPFIX?

By default, the Replicator appliance replicates syslog messsages received from exporters and forwards them to their assigned collectors in the same format. To have syslogs automatically converted to IPFIX before being forwarded, run setting enable convertSyslog from the REPLICATOR> prompt.

How do I send the syslog notifications and/or IPFIX metrics generated by the Replicator appliance to more than one collector?

To send the appliance’s syslog notifications and/or IPFIX metrics to multiple collectors, first configure the Replicator appliance to send the packets back to itself. After that, create a profile with the same appliance as an exporter and assign collectors as needed.

Note

Since there are separate settings for syslog notifications and IPFIX metrics, they will require separate profiles.

Why am I receiving an error about a loop being created when I try to add a new exporter or collector?

A loop is created when a profile is configured in a way that incoming packets will be sent back to the source. This can happen when a collector is added to a profile with an inclusion policy that defines the same IP address as an exporter.

Can a profile have the same in/listening and out/sending port?

Yes. The Replicator will automatically verify updates to a profile’s settings to ensure that no loops are created when new exporters and/or collectors are added.

How do I change the root user password on the Replicator appliance?

To change the root password, SSH to the appliance as the root user and issue the passwd command.

How do I change the web interface admin user password on the Replicator appliance?

To change the password for the web interface admin user, SSH to the appliance as the replicator user and run password webui from the REPLICATOR> prompt.

How do I change the hostname and IP address of the Replicator appliance?

To change the hostname and IP address of the appliance, log in as the root user, and then run /home/replicator/conf/sethostname.sh. Alternatively, system change can be run from the REPLICATOR> prompt.

In a multi-network/traditional high availability configuration, how often does the secondary appliance poll the primary to check if it's available?

The polling interval is controlled by the Update Interval setting on the Settings tab/page of the web interface and can be set anywhere between 30 to 60 seconds.

How often is the database of the primary appliance synced to the secondary, in a multi-network/traditional high availability configuration?

The secondary appliance checks the primary for changes every 5 minutes. If changes are detected, the secondary appliance’s configuration is updated.

Does the Replicator appliance support giant packets?

Jumbo frame sizes up to 65534 bytes are supported by the Replicator appliance. To take advantage of this, interfaces must be configured to support the maximum packet size expected for replication. Fragmented packets are also supported.