Sparrow IQ Manual
Contents
1. 11 43 I RUP 13 44 ESTEE LINT NR 13 45 PRES SUI ates RN OIM ens eon a atone aioli mea IR EEDE 13 4 6 Ere M 13 A01 Top CONV EN SATIOINS vcsicsecsexsscnsncaiecedsareasaneahoasrwanineniaie RAE ANANA KESET Ai 14 2 nr oos dioere dL RN RRRRRRCRREEPR 14 WWW sparrowiq com Q Sparr w A63 ee ee ene eee ee 15 4 6 4 Top Classes of Service RRRDRR 16 4 6 5 B ndwidthi RAL fffee EE 16 AGO Tranic VOLHITIE 18 oM MEME eh Uu 18 Bs POCO i RE 19 AOS TOP VII FUN ME pU IM I eU euaT NUMERI VENE 20 5 B dl TC 21 6 Custom Time Intervals s ose Niri UPIONERUINE ERU EUR NU UDINE HEMIMU RN RU E 22 7 REDOT TIT m 23 d Ema and PDF REPON EAEAN E 24 RS Dl f mRENOSm 25 9 SEINO RTT TT TI UTERE 28 92 7 jore dC 28 9 2 AOS as care 28 9 3 CETTE pic E T eee EET See MTT SUL STE Teen Teme en TUN Snr ree ne Neer Sree ST eee 29 9 4 RO acacia E E 29 95 FOR AER O weak tac te 29 9 6 Service Ma Ppl t iekea 29 9 7 COS aAA AAE A ON AA A 30 9 8 POO E AA EE EA2. e Country A country filter selects all network traffic transferred from or to the selected country Auto completion allows the user to select any country by entering part of the country name e Domain A domain filter selects all network traffic based on its domain name Auto completion allows the user to select a domain by entering part of the domain name WWW sparrowiq com 11 Sparr sw WWW sparrowiq com 12 Sparr cw IQ 4 3 Create PDF This will create a PDF file of the dashboard with all the gadgets included and download it on the viewing PC for future references 4 4 Refresh This button forces all gadgets on the dashboard to reload their data from the server 4 5 Alerts Summary This provides a count of number of generated Alerts in the system In addition the Alerts gadget on Dashboard displays the latest 4 alerts raised by Sparrow Welcome admin Logout Spart we Dashboard Reports Alerts 4 Settings Network Overview Add Fitter 4p Add Gadget C ihr 6h 24h Aug23 14 07 Create PDF D Refresh Alerts 1of4 Mark s iPad Aug 23 2013 14 07 Traffic crossed 1 0MB 14 5MB 1 time in 1 minute Dismiss 2 of 4 FTP Traffic Aug 23 2013 14 07 Bandwidth crossed 1 0Mbps 4 2Mbps 1 time in 1 minute Dismiss 3of4 Mark s iPad Aug 23 2013 14 06 Traffic crossed 1 0MB 15 7 MB 1 time in 1 minute Dismiss 4 of 4 FTP Traffic Aug 23 2013 14 06 Bandwidth crossed 1 0Mbps 4 4Mbps 1 time in 1 minute Dismi
3. Sparrow User Guide Release 1 3 2 WWW sparrowiq com Sparr w Table of Contents 1 PINT E E E E A A E E E Bs his O 1 h2 Requirements Specification s s ersereseseereoresereoreserooresereoresersereoresereoresereorereeserorresereereseroorereesereorererseresereereree 1 1 2 1 Hardware Requirements for the Sparrow i SAE EE EE E EEEE 1 1 2 2 Software Requirements for Sparrow H 2 1 2 3 Virt al Environments 2 1 2 4 Network Requirements 3 14 5 Supported Browsers PP 3 1 3 Ui cU M M 3 1 4 Contact gfe s 01 1419 ERR 4 installation and n 06 Ad UTA AIEE IEOS LC E ETA A 4 22 OCS aa TOP 4 2 3 ELE 0 E EEE EN EEA A OF X 4 2 3 1 Sparrow e IC TAS E 5 2 3 2 Sparrow Free 80 9 hci e ne N E N E E 5 2 3 3 Sparrow ZEE 5 Bo MO Por E 6 24 TINS AO Micro 6 PS OVID EET TEE 3 1 Deployment using SPAN Switch eate dtt inp ru p eri on oo utut Gas un au ap peto E P UI 7 3 2 Deployment using Network dto 7 3 3 Canne ACCOSS event E EE EUMD E EEEE E 8 3 4 1E T 8 Y e LC 4 1 NP M I 10 4 2 c P
4. As on the dashboard this can be customized to view the data for various timeframes such as 15m 1hr 6hrs and 24hrs Note that the drilldowns are always one level deep If the user drills down to an Endpoint say UserB and then clicks on an Application say HTTP this will take the user to the drilldown of the application HTTP for the whole network and is not a drilldown of HTTP traffic specific to UserB This is the same if a user drills down HTTP from Top Application gadget on the dashboard WWW sparrowiq com 21 Sparr w 6 Custom Time Intervals The custom time interval allows the user to view any period of time in the past 3 months This gives the user accessibility to view stored live traffic on any dashboard gadget or generated report For example if the user wanted to view a past day they would simply set the start and end time in the custom time interval as seen in the below figure 15m dhr hr 24hr Dec 2911 44 Create PDF M Refresh Start Date amp Time 12 10 2014 08 20 End Date amp Time 12 10 2014 08 85 Qo December 2014 0 Su Mo Tu We Th Fr Sa 6 35 Mbps F 3 A 5 G O EAEN so5mops a 5 46 17 10 19 o 341 55 Kbps 30 31 Time 08 35 Hour Jd Minute 1 3 mx Now Done eae BOS Figure 15 Custom Time Interval The custom time interval also has a calendar to visually select a past date After selecting a custom interval simply select Ok to ge
5. rediscover interfaces restart Sparrow 3 1 Deployment using SPAN switch In this deployment scenario the Sparrow workstation is connected directly to a switch or router that supports port mirroring Many devices even inexpensive switches support this feature in some way though it may be known as Port Mirroring SPAN used mostly by Cisco equipment or RAP used mostly by 3Com equipment Many popular vendors support this including Cisco DLink Dell HP Linksys and Netgear Switch with a SPAN port Internal Network Internet Figure 1 Deployment on SPAN Switch 3 2 Deployment using Network Tap A network tap channels network traffic by providing drop lines which can be connected to the Sparrow workstation Regular taps provide the IN and OUT directions separately both must be connected to the Sparrow workstation Aggregator taps copy both directions of traffic onto the same port Several taps of both types from Barracuda VSS Systems and NetOptics have been tested successfully Internal Network Internet Sparrow Workstation Figure 2 Deployment on Network Tap WWW sparrowiq com 7 Sparr iw 3 3 Launch amp Access To launch Sparrow select SparrowlQ gt SparrowlQ Analyzer from the Windows start menu On the first startup Sparrow will prompt you for a license key Once the license is entered and validated the prompt disappears as an icon into the system tray Note that it may take a minute or so fo
6. on the top right corner of the gadget Unknown Port Sparrow maps traffic source or destination port numbers up to port 50 000 However some applications use high port numbers which are not defined or reserved with the IANA port number list Sparrow in this case identifies this traffic as Unknown Port 0 Any traffic without TCP or UDP as the transport layer protocol is marked as Port 0 In order to add a new port number please refer to 9 5 WWW sparrowiq com Top Applications Last Hour iu HTTP 80 B SSH 22 doses Et sna cs 1553 E B iRDMI 8000 Application Received Transmitted m HTTP 80 23 65 MB 10 72 MB Ej SSH 22 0 00 B 16 68 MB E HTTP S 443 8 56 MB 4 40 MB E sna cs 1553 0 00 B 3 52 MB B iRDMI 8000 512 43 KB 545 17 KB Figure 9 Top Applications 15 Total 34 36 MB 16 68 MB 12 96 MB 3 52 MB 1 08 MB Sparr w 4 6 4 Top Classes of Service This gadget lists the top 5 classes of service that are generating consuming traffic in the network The default view hides the table view which can be accessed by clicking on the sign on the top right corner of the gadget In order to add new classes of service please refer to 9 6 Top Classes of Service Last Hour mm BE DSCP 0 Best Effort E DSCP 4 a DSCP 12 AF12 E DSCP 22 AF23 m DSCP 10 AF11 Class Received Transmitted Total i DSCP 0 Best Effort 47 92 MB 20 31 MB 68 23 MB E DSCP 4 0 00 B 16 6
7. 1 53 Mbps E Outgoing 17 17 Kbps 92 19 Kbps 207 64 Kbps E onmin 101 31 Kbps 335 82 Kbps 1 47 Mbps amp Local 1 86 Kbps 40 58 Kbps 425 14 Kbps ul Other 0 00 bps 37 10 bps 713 07 bps Figure 11 Bandwidth Graph WWW sparrowiq com Sparr iw 4 6 6 Traffic Volume The Traffic Volume gadget displays the volume of traffic in the network If Gateway Monitoring has been enabled and configured as explained in the previous section the traffic volume is broken down to display the different sections of incoming outgoing local and other traffic Clicking on the on the top right corner of the gadget will display the Total Transferred data volumes In figure 12 the local traffic is also displayed due to the gateway monitoring feature being enabled Now the user can differentiate between local traffic volume and external traffic volume Traffic Volume 10M 8 0M 6 0 M 1 co 4 0 M t E 2 0M t it m n mt m t Ti 0 T 0 ml 10 42 10 44 10 46 10 48 10 50 10 52 10 54 10 56 Bp Total Volume 65 01 MB E Outgoing 17 26 MB E Incoming 43 69 MB m Local 4 05 MB ni Other 334 00 B Volume Accumulated Volume Date Time Incoming Outgoing Incoming Outgoing 2013 03 28 10 00am 43 69 MB 17 26 MB 43 69 MB 17 26 MB Figure 12 Traffic Volume Chart 4 6 7 Traffic Statistics The traffic statistics gadget summarizes the Total and Average Volume in add
8. 8 MB 16 68 MB gono sc 12 AF12 93 17 KB 0 00 B 93 17 KB gl osc 22 aF23 60 46 KB 0 00 B 60 46 KB Mj osce 10 AF11 14 53 KB 0 00 B 14 53 KB Figure 10 Top Classes of Service 4 6 5 Bandwidth Rate The bandwidth rate gadget displays the measured overall bandwidth as measured at the gateway or wherever Sparrow is deployed The default view displays only the overall bandwidth trend but more series can be enabled by selecting Gateway Monitoring under Settings Internal Addresses You can also specify internal gateways and enable display of local traffic This will result in multiple series of line graphs on the dashboard Clicking on the on the top right corner of the gadget will display the Total Transferred data rates If Gateway Monitoring and local traffic options are enabled Sparrow will display a view of the breakdown of incoming outgoing local and other traffic Incoming and outgoing refer to the traffic going into and out of the configured subnet s Local refers to traffic moving around within the subnet itself Note that the bandwidth rate gadget has a delay of up to 3 minutes WWW sparrowiq com 16 Sparr sw Bandwidth 1 8M 1 5 M 1 3M 1 0M 10 32 750 00 K Total 1 05 Mbps Outgoing 146 52 Kbps Incoming 812 94 Kbps 500 00 K Local 90 75 Kbps Other 0 00 bps 250 00 K 0 10 26 10 28 10 30 10 32 10 34 10 36 10 38 10 40 Series Min Avg Max gl Total Data Rate 158 85 Kbps 468 63 Kbps
9. B 7 7 d Unknown 2 35 MB 5 05 MB 7 40 MB 4 896 ES B Germany 4 42 KB 8 79 KB 11 22 KB 0 0 Figure 13 Top Countries WWW sparrowiq com 19 Sparr sw 4 6 9 Top Domains The top domains gadget will display the most domains The gadget displays the top five domains consuming the network bandwidth for the time period specified on the dashboard The top domains gadget displays a pie chart of the top 5 domains with a table view of the data The table view can be hidden by selecting minimize on this gadget The pie chart illustrates the top 5 domains percentages of traffic consumption in relation to the top 5 domains displayed The table displays the received transmitted and total traffic for each domain Hovering over the domain also displays the percentage of traffic consumption for that domain Clicking details at the bottom right of the gadget will display the top 20 domains in a report for the selected time frame on the dashboard Now the top 20 domains are displayed with their respective percentages The table below the pie chart lists the domains from highest generated traffic to lowest generated traffic and outlines the received transmitted and total traffic for that domain To view data associated with a domain drilldown by clicking on the domain of interest For more information on drilldown see section 5 Note when adding a domain filter on to the dashboard that has not yet been populated a warning message will po
10. Dismiss 40f17 HTTP Alert Jul 31 2014 13 10 Bandwidth crossed 1 0Mbps 1 0Mbps 1 time in 1 minute for HTTP Dismiss the reported data including dynamic filters gadget selection and duration selection Traffic Statistics Last 15 Minutes x Top Domains Last 15 Minutes 32 Total Volume Max Traffic Rate 3 84 Mbps 123 98 MB Avg Traffic Rate 1 13 Mbps Each of the gadgets shows a 8 27 MB Min Traffic Rate 355 59 Kbps recent summary of network activity Several gadgets show pe Re ra aa Be tu n asus sd i i the top or most frequently seen mm ED reaa cert J 2kamaitechnologies com 347 31 KB 7 85 MB 8 19MB 19 55 595 2 attributes such as endpoint Or as ores sue sone was application Note that only the eme een ssms top 5 of each attribute are cows 115 4 KB presented and represented in SE GN ME MKEPC the associated pie chart Wedges a Wie server 54 230 39 20 jfk1 r cl Jane LP of these pie charts compare the top 5 items against each other M vA oris al not all observed traffic Percentages of these items against up to 20 top items of observed traffic can be found by p clicking the Details button of Application Received Transmitted li Il TI Min Rate Avg Rate Max Rate 255 59 Kbps 1 13 Mbps 3 84 Mbps Traffic Volume Last 15 Minutes Il 14 18 Hrs 443 14 23
11. EE EET tate anne EEA 30 9 9 E EE 30 9 10 EL C 31 9 10 1 Adame Uer ACCOUN rerea N E O E E N 31 911 PONE IVINS m tans 32 EE 1 e 32 11 Troubleshooting Sparrow s rP 33 www sparrowiq com Sparr cw IQ Table of Figures Figure 1 Deployment on SPAN Switch Figure 2 Deployment on Network Tap Figure 3 Sparrow Login Page Figure 4 Dashboard Capture Figure 5 Adding a Filter Figure 6 Generated Alerts Figure 7 Top Conversations Figure 8 Top Endpoints Figure 9 Top Applications Figure 10 Top Classes of Service Figure 11 Bandwidth Graph Figure 12 Traffic Volume Chart Figure 13 Top Countries Figure 14 Top Domains Figure 15 Custom Time Interval Figure 16 Top Endpoints Report Figure 17 Email Report Figure 18 Alerts Page Figure 19 Gateway Setup Figure 20 Probe Setup Figure 21 Email Setup www sparrowiq com 10 11 13 14 14 15 16 17 18 19 20 22 23 24 25 29 30 31 Sparr w 1 Introduction Sparrow is a flow analytics solution which provides near real time visibility of the network traffic It allows the IT administrator to monitor the network usage based on conversation application user class and more without the requirement of expensive flow ca
12. MB 6286MB 78 09MB 626 these gadgets Bare 20 5 10 MB 21 35MB 26 45MB 21 0 Bl rors over TLs sst 995 1 49 MB 8 58 MB 10 07MB 8 2 Details ul 528MB 43 Series Min Avg Max Total Hr m E 827 2 MB 3 98 M 3 1 r Top Countries Last 15 Minutes 9 dress tes i yahoo com Details ul Details ul Endpoint Received Transmitted Total Percent n B EDAD fH 2A Country Received Transmitted Total Percent 4 52 54 M 2 ME 142176 10 RAD ODWNED SS GE Bl Private address 119 42 MB 5 39 V 13480MB 53 0 H pry gives states 4 19 MB 82 49 MB 8668MB 341 21 83M 22 73M is 7 7 B G 5c 11 88MB 267 12KB 12 25MB 8 6 ULL iiid I ES M ycs vip dcb yahoo com 283 76 KB 9 29 MB 9 58MB 6 7 Top Classes of Service Last 15 Minutes 3 Bo 0 Best Effort Pi oscr 48 cse Hcr Figure 4 Dashboard Captur 4 1 Duration The duration selector allows one to select the timeframe that is applied to all gadgets on the dashboard The available options are www sparrowiq com 10 Sparr w e Previous 15 minutes e Previous hour e Previous 6 hours e Previous 24 hours e Custom time interval Clicking any of these options will cause the dashboard to refresh itself using the selected duration 4 2 Filters This feature allows the user to focus the results of the dashboard gadgets by selecting certain criteria on which to run analysis Seven different filters can be applied simultaneously One valu
13. Sparrow is probing the internet gateway of your u network This will enable the option to add directionality to Supe Aire De reports based on your internal network j y Subnet Address 2 Subnet Address 3 Subnet Add 4 Show Local Traffic This will show internal traffic e g internal file transfers seperately on reports By default internal traffic is included in reports as part of the overall traffic Subnet Address 5 xxx Save Figure 19 Gateway Setup 9 4 Name Mapping This feature allows you to give aliases to IP Addresses IP addresses may be resolved to a longer name then desired or an IP address may not be resolved This tool allows you to give friendly names to IP addresses that you will recognize Simply click on Add Entry and enter the IP address and Alias before clicking the checkmark to save Discovered IP addresses and their resolved names cannot be edited however aliases can be configured for these addresses 9 5 Port Mapping This feature allows you to give aliases to ports Many standard well known and commonly used ports have been pre configured To add a new alias simply click on Add Entry enter the port number and alias and then click on the checkmark to save To edit an existing entry click on the alias and make the change Only the alias of pre configured ports can be modified 9 6 Service Mapping This feature allows you to give aliases to the classes of services or DSCP fi
14. arrow requires access to all the network traffic that needs to be monitored This is achieved by sending a copy of all traffic to the Sparrow machine using either a SPAN capable switch port mirroring or a network tap Port mirroring or SPAN Please check your switch s user manual to verify that the feature exists and follow the specified configuration steps to enable port mirroring to one free port This is the port that the Sparrow PC will be connecting to Network Tap f using a Tap the input and output ports need to be connected to allow the data to pass through The Sparrow PC is connected to the drop of the Tap where data is copied to The drops from Tap will be either one or two connections depending on the type of Tap If it is an Aggregator Tap only one Ethernet connection will be available if not there will be two Ethernet connections 1 25 Supported Browsers The interface to access Sparrow is via a standard web browser Sparrow can be accessed from any machine in the network as long as the Sparrow PC is reachable This includes all connected computers tablets and phones The following minimum versions of these popular web browsers have been tested and are supported e Firefox 13 e Chrome 20 e Safari 5 e Internet Explorer 9 10 11 1 3 Release Notes e Please ensure that the PC does not go into sleep hibernation mode Sparrow has been observed to consume unnecessary processor cycles when a PC wakes up f
15. be restarted to ensure the changes are properly detected Probe 0 Status RUNNING Traffic lt 1Mbps Interface NVIDIA nForce MCP Networking Adapter Driver Microsoft s Packet Scheduler Save Figure 20 Probe Setup 9 9 Email Setup This page contains the settings needed for outgoing emails related to Alerts The available fields are e SMTP Server Outgoing mail s IP address or name e SMTP Server Port Outgoing mail s server port number WWW Sparrowiq com 30 Sparr w e Mail account Mail account username e Mail password Mail account password e Connection Security None has default port number 25 SSL TLS has default port number 465 STARTTLS has default port number 587 e Enable HTML Emails HTML formatted emails for Alerts Once the configuration details are entered you can test the settings to check if they work by clicking the 7est Settings button Remember to select Save before testing the settings Welcome admin Logout Sparr Swe Dashboard Reports Settings Settings System Status Settings Gateway Setup Name Mapping Port Mapping Service Mapping Groups Probe Email Setup Users Report Emails Branding Required Optional SMTP Server example ca Connection Security SSL TLIS SMTP Server Port 25 Default 465 Enable HTML Emails Mail Account admin example cal Mail Password essseeee Reset Save Figure 21 Email Setup 9 10 Users This lists all users on the Sparrow system This co
16. ckets will not be dropped 2 3 4 System ID Each Sparrow license is tied to one PC and requires you to identify the PC with a SystemID during the purchase process To obtain this SystemID you can use one of the following methods e f Sparrow is already installed as a trial launch the Configuration right click on Sparrow icon in the system tray and select Sparrow Configuration The dialog box provided will display the installed PC s SystemID e Download and install Sparrow and on first run it will prompt for a license and specify the SystemID of the PC which can then be used to complete order online e Download the SystemIDFinder package from the Support page on www sparrowiq com Once downloaded run the executable file to obtain the SystemlD of the PC 2 4 Uninstallation Sparrow will prompt you to confirm if you want to remove Winpcap Winpcap is a library which may be used by other software on the PC If removed other software packages may not work which depend on Winpcap Before removing all files Sparrow will also confirm if the database is to be saved for future updates access WWW sparrowiq com 6 Sparr cw IQ 3 Deployment Sparrow requires access to all the network traffic that needs to be monitored This is achieved by sending a copy of all traffic to the Sparrow machine using either a switch capable of port mirroring or a network tap If only one interface is present Tap mode will be disabled To
17. d anytime by clicking the lock icon in the Users tab under the Settings page WWW sparrowiq com 8 Eure PEPEE ERE ERE riu PEPEE E EE PEPEE riu PEPEE E EE ERE EE pi pi pi E EE E Seacrest HEH p gue uere EE RENE E E E B E E E E E ki E E EEEE E E E E E E E E E E E E E E E E E pi Hi pi Hi H Hi pi pi pi Hi pi pi pi Hi pi pi pi Hi pi Hi pi Hi pi pi H Hi pi pi PEI bone the email address previously registered with your SparrowlQ account Instructions will be A forgotten password can be reset by clicking the Forgot your password link and entering emailed to the address provided Spar WWW Sparrowiq com Sparr w 4 Dashboard The dashboard presents analysis Welcome admin Logout of recent network activity Muse Summary data is presented sear Saas onion sah through a set of gadgets that sara Aas H p 8 provide details on different Aes D Sparr amp w h e e f k ffi 10f17 HTTP Alert Jul 31 2014 13 57 Bandwidth crossed 1 0Mbps 1 2Mbps 1 time in 1 minute for HTTP Dismiss C a ra cte rl st l C S O n etwo r tra l C 20f17 HTTP Alert Jul 31 2014 13 55 Bandwidth crossed 1 0Mbps 1 4Mbps 1 time in 1 minute for HTTP Dismiss Al SO provid ed a re tools to control 3of17 HTTP Alert Jul 31 2014 13 14 Bandwidth crossed 1 0Mbps 1 4Mbps 1 time in 1 minute for HTTP
18. d on dashboard but will extend this to show the top 20 entries 4 6 2 Top Endpoints Top Conversations Last Hour ml x Mark s iPad Vimeo n2w 0 0 0 008 Steve PC2 FTP Server1 43 we 48 7 MB prn1 facebook com Catherine PC1 ozm 2059 d Bell Canada John Thompson PC2 se wb 2600 dj Google John Thompson PC2 Details al Figure 7 Top Conversations The highest traffic generators and consumers are listed in this gadget This list of IP addresses includes both local and remote endpoints The default view is to show only the pie chart in this gadget However one can get a table view of the data by clicking on the sign on the top right corner of the gadget Clicking on Details will run a report to show the top 20 endpoints for the selected timeframe Top Endpoints Last 15 Minutes EN John Thompson PC2 Hn Bell Canada Di Google T Verizon au Catherine PC1 Figure 8 Top Endpoints WWW sparrowiq com Details Endpoint Received Transmitted E John Thompson PC2 69 43 MB 1 53 MB El Bell Canada 384 76 KB 25 94 MB B Google 249 98 KB 16 71 MB ii Verizon 243 63 KB 16 31 MB a Catherine PC1 263 93 KB 8 55 MB Total 70 97 MB 26 32 MB 18 98 MB 16 55 MB 8 82 MB 14 Sparr sw 4 6 3 Top Applications This gadget lists the top 5 applications that are generating consuming traffic in the network The default view hides the table view which can be accessed by clicking on the sign
19. de exe e sparrow analyze exe e sparrow web exe e sparrow logger exe e probe exe e mysgld exe You should now be able to install Sparrow 2 Lgetan error when attempting to run the Sparrow SystemlDFinder The Sparrow SystemlDFinder requires that the Microsoft Net 2 0 Framework be installed This software is freely available from the Microsoft website 3 I get an Invalid or Missing License message after starting Sparrow or after entering my license code Please ensure that the license entered is copied or typed exactly as given Licenses are Case sensitive Purchased licenses are tied to a specific computer Verify that the license to be used is appropriate for the computer by confirming the SystemID Verify that the license corresponds to the correct version of Sparrow Each new version will require a new license Your license key can be updated free of charge within your maintenance period by going to the Sparrow support page For more details check out the FAQ page on www sparrowiq com 4 After entering my license get a Timer file broken missing message The trial license file has been corrupted You may need to reinstall the product 5 geta404 error when pointing my browser to Sparrow WWW sparrowiq com 33 Sparr cw IQ a Please ensure that Sparrow is up and running Once started it takes a few moments to initialize before connections and logins are allowed b If accessing Sparrow rem
20. e Once the trial license expires Sparrow automatically switches to the Free Mode In this mode only the bandwidth gadget on dashboard is available to use 2 3 3 Sparrow Full License Sparrow is available for different levels of bandwidth support All Sparrow purchases are perpetual licenses Note that Sparrow is tied to a PC and you will need to provide the SystemID for the purchase See Section 2 3 4 on details of obtaining the SystemID The supported levels of bandwidth are e Sparrow 7 a perpetual license supporting up to 7 Mbps e Sparrow 15 a perpetual license supporting up to 15 Mbps e Sparrow 30 a perpetual license supporting up to 30 Mbps Threshold Allowance Even though the numbers stated above are 7 15 and 30 Mbps Sparrow provides you with a window of an extra 25 allowance before Sparrow starts dropping packets So for Sparrow 27 the max threshold value is 8 75Mbps for Sparrow 15 the max threshold is 18 75Mbps and for Sparrow 30 the max is 37 5Mbps Once the sustained bandwidth stays above the real max threshold value data will be dropped by Sparrow WWW sparrowiq com 5 Sparr w Bandwidth calculation The above numbers 7 15 30 Mbps are tracked and calculated as a moving average and not based on instantaneous bandwidth So the network bandwidth may spike up for a few seconds or minutes to a higher value but if the moving average stays below the threshold value pa
21. e of each filter may be specified The different types of filters include e Endpoint Either an IPv4 Add Gadget Tm ahr amp hr address or a host address that has been added to the name mapping table can be specified Auto completion allows the user to select any Uo O Alerts entry in the name mapping Destination Endpoint table by entering part of the You have noaler name or address Application Conversation Endpoint IP Group Service Class source Endpoint Close Add e P Group An IP group is a Top Conversati Traffic Sta Figure 5 Adding a Filter range of IPv4 addresses that are specified by creating a group with the Groupsinterface on the Settings page Once created these groups can be selected as filters e Application Any application found in the port mapping table or any valid port number can be selected as an application filter Note that auto completion allows the user to select applications from a list of matches e Conversation A conversation filter selects all network traffic that is transferred between a pair of endpoints Auto completion functions for each endpoint in a conversation in the same way as a filter for a specific endpoint e Service Class A service class filter selects data based on its class of service as defined in the header of all IPv4 packets Auto completion allows the user to select from any service class defined in the service mapping table
22. e the Microsoft Visual C Redistributable 2008 package which is available for free download via Microsoft s website Note that multiple versions of the Redistributable package can co exist in the system 2 2 Upgrades One can choose to initiate installation of a newer version of Sparrow without uninstalling the older version Sparrow will remove the older version if found in the system Sparrow will automatically retain the existing network data so that the old data run Reports etc with the new updated version is still usable 2 3 Licensing All versions of Sparrow require a license key You may obtain one of the following licenses e A Trial license you only need to specify name and email address e Purchase Sparrow When purchasing Sparrow the PC on which it runs has to be identified by a SystemlD For both the options an email will be sent to the registered address with a Sparrow license WWW sparrowiq com 4 Sparr cw IQ Sparrow Sparrow E s ian Sparrow Maximum Maximum Rate Supported Maximum Rate Supported 30 Mbps 7 Mbps 7 Mbps 15 Mbps 30 Mbps eme tome mem ames omm perse ff e f ox Table 3 Division of Licensing 2 3 4 Sparrow Trial License One can try Sparrow before purchasing for free Simply register with a valid email address and a Sparrow Trial license will be emailed to the address with most features enabled and valid for 15 days 2 3 2 Sparrow Free Licens
23. eld of IP packets This table comes pre populated with common names for all valid values of the field Only the alias of pre configured classes of service can be modified To add a new alias simply click on Add www sparrowig com 29 Sparr cw IQ Entry enter the value and alias and then click on the checkmark to save To edit an existing entry click on the alias and make the change 9 7 Groups This allows you to allocate a group of IP addresses together For example one subnet can be grouped together which belongs to the Finance Department of the company Entries added here will be available as global filters across Sparrow and you will be able to apply the filters on dashboard drilldown or reports page 9 8 Probe This feature allows the user to change the interface used for listening to network traffic on the Sparrow machine This feature also allows the user to switch between the SPAN and TAP mode For each of the interfaces the probe page displays the current state of the probe module with each probe service s current traffic measurement Sparrow may need to be restarted if changes are made to the network cards Welcome admin Logout Sparr we Dashboard Reports Alerts o Settings Settings System Status Settings Gateway Setup Name Mapping Port Mapping Service Mapping Groups Email Setup Users Report Emails 9 If changes are made to the network cards e g added or removed on your machine Sparrow may need to
24. ition to the Minimum Average and Maximum bandwidth rates for the specified time period WWW sparrowiq com 18 Sparr w 4 6 8 Top Countries The Top Countries gadget displays the top five countries consuming the network bandwidth for the appropriate time period The default view is a pie chart of the top 5 countries with a table view of the data The table view can be hidden by selecting minimize on this gadget The pie chart displays the top 5 countries percentage of traffic consumption in relation to the top 5 countries displayed The table displays the received transmitted and total traffic for each country Hovering over the country also displays the percentage of traffic consumption for that country Clicking details at the bottom right of the gadget will display the top 20 countries in a report for the selected time frame on the dashboard Now the top 20 countries are displayed with their respective percentages The table below the pie chart lists the countries from highest generated traffic to lowest generated traffic and outlines the received transmitted and total traffic for that country Top Countries Last 6 Hours x Bl iB Private Address em United States B 4 Canada ie Unknown B mg Germany Details al Country Received Transmitted Total Percent ES B Private Address 70 02 MB 57 25 MB 127 27 MB 79 236 a United States 2 02 MB 11 63 MB 13 64 MB 8 596 E j Canada 5 82 MB 8 37 MB 12 30 M
25. nerate the dashboard with a chosen interval s traffic All of the features available with the other time tabs such as 15min are also available with the custom time interval The custom time interval traffic can be filtered or drilled down on to provide further insight The reports as described in the next section can also be generated to correspond to the traffic in a customized interval WWW sparrowiq com 22 Sparr cw IQ 7 Reports Reports give the user a more in depth view of the network by reporting on various metrics including long term timeframes The following are available Executive Summary Traffic Usage Summary Bandwidth Traffic Volume Top 20 Applications Top 20 Conversations Top 20 Classes of Service Top 20 Endpoi Top 20 Countr nts les Top 20 Domains Top Application Detailed Top Conversation Detailed Top Endpoint Detailed Each of the above reports can also be generated for pre defined IP Groups and or any of the filters described in 4 2 Sparraw Reports Top 20 Endpoints Dashboard Filter Top 20 Endpoints Endpoint Youtube Peter s PC Mark s iPad John Thompson PC2 Vimeo Bell Canada AT amp T Internet Services Google Verizon CNN fibre lewel platforms rhill storm ca Mark s iPhone CNN r 23 ebay com Microsoft Corp pr 3 twitter com FTP Server1 Jill s Blackberry hrdO linkedin com dr2 bloomberg com Reports Alerts Dashboard 1 week Repo
26. ntains information such as the username full name and email address Passwords can be changed or updated by clicking on the lock icon next to each user User accounts can be deleted by clicking on the x icon next to the user s details New users can be added with a maximum of up to five depending on your license 9 10 1 Adding User Account This facility allows the admin to add users to Sparrow Adding a new user requires e Username e Email address e First name optional WWW Sparrowiq com 31 Sparr cw IQ e Last name optional e Password 9 11 ZAeport Emails This section provides the user with a list of all the scheduled email reports and provides a way to cancel them Several details of the scheduling are shown including target email address frequency and the day and time on which the report is run To remove any scheduled report simply click the x button on the associated row 10 Help The Help page displays this User Guide WWW sparrowiq com 32 Sparr cw IQ 11 Troubleshooting Sparrow 71 Whenltry to run the installer receive a message saying that Sparrow is already running Shut down Sparrow by right clicking on the Sparrow icon in the system tray and clicking the Exit item To be sure all processes have stopped start the Task Manager using CTRL ALT DEL and select the Processes tab If any of the following processes are in the list select them and click End Process e sparrow no
27. om WWW sparrowiq com 35 Sparr cw IQ 15 was asked to export log files for debugging purposes How do Ido that a Goto the System Status tab on the Settings page and click the Export Log Files button This will download an archive of log files to your default download directory b If the product is not functioning log files may be retrieved by copying the contents of the Sparrow Home Vlogs directory 16 How do erase all network data previously collected by Sparrow Go to the Settings tab on the Settings page and click Delete Database WWW sparrowiq com 36
28. orks on modest hardware Processor speed and RAM required increases with the size of the observed network WWW sparrowiq com Sparr cw IQ Recommended System Requirements Minimum System Requirements for production environments Dual Core 2GHz Quad Core 2Ghz One interface if using a switch with port mirroring OR Ethernet interfaces Two Interfaces if using a Tap with aggregator port OR Three interfaces if using a regular Tap for trial installations Table 1 System Requirements 1 2 2 Software Requirements for Sparrow PC Sparrow is supported on the following Operating Systems e Microsoft Windows Vista e Microsoft Windows 7 e Microsoft Windows 8 e Microsoft Windows Server 2008 Sparrow also requires e Microsoft Visual C Redistributable 2008 The Visual C Redistributable 2008 package can be downloaded for free from Microsoft s website Check the installed programs list if the packages are already installed Note that the multiple versions of the VC Redistributable can co exist on the PC without any impacts 1 2 3 Virtual Environments Sparrow has been successfully tested on the following virtual environments Virtual Host Technology Client OS VMWare vSphere Hypervisor formerly ESXi 5 0 Windows Vista 7 8 Server 2008 VMWare Player Windows Vista 7 8 Server 2008 Table 2 Supports Virtual Environments WWW sparrowiq com 2 Sparr sw 1 2 4 Network Requirements Sp
29. otely please ensure that you have network connectivity to the Sparrow computer C Sparrow runs on port 8000 by default and this address must be specified within your browser using the format http lt IP Address port where IP Address is the computer running Sparrow and port is 8000 unless you ve changed it d Check with your system or network administrator to ensure that e The Sparrow computer isn t blocking or filtering the web port and e The same isn t blocked by any routers on the network 6 lcannot log into Sparrow a Check your username and password both are case sensitive Sparrow ships with one default account configured Username admin Password admin b If you have forgotten your password click on the Forgot your password link on the login page Note that this feature requires that an outgoing SMTP server be previously configured 7 ldon tseeany data on my dashboard or reports a On first startup or on restart after being shut down for an extended period Sparrow may take up to three 3 minutes before the first set of data is processed and available for gadgets and reports b Verify the interface selection used by Sparrow To do this select the Probe tab on the Settings page select the Span or Tap mode as necessary and select the appropriate network interface the click Save to save any changes c Verify that all processes are running by going to the System Status
30. ow the current state of the module 9 2 Node Controller is responsible for managing the other processes and services that exist on the machine and provides naming services for IPC modules Analyzer this is the heart of the Sparrow which handles most of the work and performs network data processing and analysis Web Server provides the web interface to Sparrow This process handles all external connections and interactions Probe Service this is the listening module which parses the incoming network traffic Database Service this module stores the network data and handles all database related services Settings This tab includes the following settings Web Port You may choose to use any unused port to access Sparrow Note that any changes to this setting will take effect after Sparrow is restarted Web Timeout Users are automatically logged out of Sparrow after idling for this duration Dashboard Refresh This is the refresh rate of gadgets on the dashboard Ignore Short Flows Network traffic sometimes consists of large number of short flows and may impact the performance of Sparrow Selecting this option will ignore such short flows with negligible impact on data accuracy and analysis while yielding better performance Long Term Report Optimization Enabling this feature will significantly speed up 1 2 and 3 month reports by removing data associated with small flows The resulting reports are s
31. p up This is to ensure the correctness of the domain name If the domain is later populated then this will reflect in the filtered dashboard Top Domains Last Hour 3 le yahoo com E 1e100 net E amazonawWs ceorm E3 Iw met m qwest net Details wl Domain Received Transmitted Total Percent A yahoo com 793 75 KB 34 39 MB 35 18 MB 48 2 E 1e100 net 8 82 MB 19 28 MB 25 89 MB 34 096 ESI amazonaws com 3 47 MB 2 80 MB 8 27 MB 8 296 Lu IInw net 217 43 KB 5 88 MB 8 10 MB 8 056 E qwest net 195 63 KB 2 54 MB 2 74 MB 3 896 Figure 14 Top Domains WWW sparrowiq com 20 Sparr w 5 Drilldown Sparrow makes drilldown simple and intuitive Drilldown is a mode where the user can view all data associated with one reference point For e g if the user is interested in viewing all information related to UserA clicking on UserA on the dashboard will take the user to the drilldown mode and show all data related to UserA In drilldown mode for an Endpoint User the user would see e Details on the user such as aliases and associated groups if configured e Total bandwidth sent and received by that user e Bandwidth consumed by the user as a percentage of total network traffic e Bandwidth rate information in bits per second e Bandwidth rate information in packets per second e Traffic volume information e Top applications used by the user e Top conversations carried out by the user e Top domains e Top countries
32. pable routers and switches Sparrow achieves this by listening to all the traffic on the network and generating flow type data For example to monitor all external transactions it is imperative to make sure that Sparrow is deployed at the gateway where all the network traffic passes through Sparrow also provides the user with various monitoring alerting and reporting capabilities 1 1 Key Features e Flow Analysis dashboard Customized dashboard provides network usage statistics and easy to follow trends e Network traffic usage via various data points such as o Top Conversations Top Applications Top Users Endpoints Top Classes of Service Top Countries Top Domains Bandwidth Usage by Rate Traffic Volume o Overall traffic summary statistics O O O O O O Q e Single click drilldown capabilities e Flow based long term reports e Flexible dashboard and report filtering e Custom alert setup for bandwidth and traffic volume e Track department wide usage via IP grouping 1 2 Requirements Specification The Sparrow analytics and monitoring solution consists of e APConwhich Sparrow software is installed e A switch with port mirroring also known as SPAN or a Tap to channel the network traffic to the Sparrow machine e Aweb browser on the same network to access Sparrow 1 2 1 Hardware Requirements for the Sparrow PC Sparrow was designed to be able to monitor small to medium sized enterprise netw
33. r all the processes to start up To access Sparrow on the same PC one can either select SparrowlQ gt SparrowlQ Viewer from Windows start menu or click on Sparrow Viewer from right clicking the Sparrow icon in the system tray This will launch the default web browser and brings up the login screen of Sparrow Sparrow can also be accessed from anywhere in the network by specifying the IP address of the Sparrow PC The default port to access Sparrow is 8000 Please make sure that the access port is not blocked by any firewall in the network 3 4 Login Once Sparrow is installed and deployed in the network one can access Sparrow from any machine in the network Sparrow can be accessed by using a computer phone or tablet connected to the local network Enter the IP address and port number of the Sparrow PC on one of the supported web browsers and this will bring up the login page as shown below Sparrew Help 2013 Solana Networks Inc All Rights Reserved Figure 3 Sparrow Login Page For example if Sparrow has an IP address of 192 168 1 100 enter http 192 168 1 100 8000 into the address bar of your browser Alternatively the address http localhost 8000 will work if connecting to Sparrow from the same computer on which it is installed Sparrow is shipped with one account admin The default login credentials are Username admin Password admin One may choose to change the passwor
34. re sent Message Body Optional body text for the generated email with maximum of 200 characters Reports will be generated and emailed at the time created on the selected day In order to see the list of scheduled emails and to cancel any previously scheduled reports see section 9 11 8 Alerts Alerts can be configured to be generated based on custom threshold values The available fields are Name This specifies the name of the alert Alert Type Metric used to monitor generate the alert Available options are Bandwidth Exceeds in Mbps and Traffic Exceeds in MB Value Occurrence and Period These fields specify the value count of occurrences and the time period to use for the alert generation The time period specified configures a trailing sliding window For a specification of x minutes the bandwidth or traffic alerting mechanism monitors and tracks the data for the trailing x minutes at any given point in time Welcome admin Logout Alerts 3 JohnT PC2 Endpoint John Thompson PC2 192 168 1 1 enter email addresses of recipients ex email email com FTP Traffic OFF Mark s iPad 1of2 Jul 12 2012 14 35 Bandwidth crossed 1Mbps 3 4Mbps 1 time in 5 minutes for Mark s iPad Dismiss 20f2 Jul112012 12 11 Bandwidth crossed 1Mbps 1 3Mbps 1 time in 5 minutes for Mark s iPad Dismiss Figure 18 Alerts Page Email Specifies whether to email when the alert is triggered and if ye
35. rom sleep hibernation mode This issue will be addressed in future release e Some Windows machines especially laptops have default settings that may disable Ethernet interfaces when a power cord is not connected in order to save power Sparrow will not be able to collect any data from the interfaces in this case It is recommended that if such power saving options is enabled on the laptop the power cord be connected for Sparrow to operate e Sparrow becomes unstable in case of a power cut and cannot be rolled back into a stable state Sparrow will need to be reinstalled with a loss of old data to get Sparrow working again This issue will be addressed in a future release e If the network cable is physically disconnected and connected to a different switch port while running Sparrow data collection may be interfered Sparrow will need to be restarted to return to a normal state e All bandwidth gadgets bandwidth rate and traffic volume data is delayed by three minutes The rest of the gadgets provide up to the minute data e Wireless interfaces In Windows Vista and Windows 7 interfaces simply called Microsoft will appear in the list You may use these for monitoring using the wireless interface Note that an AirPCAP adapter needs to be installed for this to function e In some instances another application running mySQL may conflict with mySQL running on Sparrow e Please ensure that the email address a report is sent
36. rts Top 20 Endpoints Settings Help Received Bytes Packets 3 14 GB 11 01 MP 7 05 GB 17 32 MP 2 18 GB 38 85 MP 22 58 GB 28 73 MP 549 56 MB 12 53 MP 22 41 GB 78 54 MP 15 99 GB 30 41 MP 7 62 GB 27 68 MP 2 41 GB 14 97 MP 2 24 GB 8 40 MP 6 52 GB 8 68 MP 9 28 GB 5 22 MP 125 30 MB 3 08 MP 6 55 GB 4 37 MP 48 73 MB 1 18 MP 5 83 GB 5 37 MP 2 44 GB 15 44 MP 6 43 GB 4 28 MP 5 48 GB 3 84 MP 4 96 GB 4 13 MP Welcome admin Logout Email E PDF Transmitted Bytes Packets 27 55GB 21 49 MP 18 46 GB 24 08 MP 22 41 GB 78 54 MP 548 56 MB 12 53 MP 22 59 GB 28 73 MP 1 88 KB 6 00 P 548 74 MB 10 37 MP 4 10 GB 27 40 MP 8 77 GB 17 59 MP 8 62 GB 10 28 MP 2 90 GB 5 81 MP 125 30 MB 3 08 MP 9 28 GB 6 22 MP 2 18 GB 2 74 MP 8 27 GB 5 52 MP 726 30 MB 2 50 MP 4 58 GB 15 70 MP 52 75 MB 1 09 MP 329 32 MB 2 59 MP 458 63 MB 1 41 MP Figure 16 Top Endpoints Report WWW sparrowiq com D Run Report E Total Bytes Percent 30 70 GB 11 1 25 49 GB 9 2 24 59 GB 8 9 23 24 GB 8 4 23 24 GB 8 4 22 41 GB 8 1 16 64 GB 6 0 11 71 GB 426 11 17 GB 4 0 10 86 GB 3 9 9 41 GB 3 4 9 41 GB 3 4 9 41 GB 3 4 8 74 GB 3 1 8 32 GB 3 0 7 55 GB 2 7 7 02 GB 25 6 48 GB 2 3 5 81 GB 2 1 5 42 GB 2 0 23 Sparr w Reports are available in the following timeframes e 15 minutes e 1hour e 6hours e 24 hours e 1 week e 1 month e 2months e 3months e Custom time interval Data older than 3 months is purged automaticall
37. s the frequency of emails Note that for this feature to work the Email Setup fields on the Settings page which configures the outgoing mail server settings have to be configured WWW sparrowiq com 25 IC The alerts can be specified with filters to be generated for specif Applications IPs IP Groups Classes of Service CoS Countries or Domains For the selected filter Sparrow provides the list of available options Filter Type and Value Warning When entering an alert with a domain filter that has not yet been populated message will appear This message is to ensure correctness of the domain entered The custom alert will be generated if the domain crosses the specified alert threshold Note WWW Sparrowiq com Sparr cw IQ www sparrowiq com 2 Sparr cw IQ 9 Settings This section lists and details the Settings available and configurable to the Sparrow user Multiple tabs are available under the Settings page 9 1 System Status This lists some of the system details and can act as a first step in debugging any problems you may face if Sparrow doesn t behave as intended This section displays the following information Number of flows processed in last cycle Sparrow version information License information Maintenance and update expiry date System information such as OS processor memory and interface details This section will also list the modules present in Sparrow and sh
38. ss Show All Alerts Top Conversations Last 15 Minutes a x Traffic Statistics Last 15 Minutes x TAs We Total Volume anes S Figure 6 Generated Alerts 4 6 Gadgets The dashboard represents network summary data using a collection of gadgets Gadgets can be added to the dashboard via the Add Gadget user interface found by clicking the button of the same name Initially all gadgets are enabled and available unless using the trial version of Sparrow Those that exist on the dashboard can be relocated by clicking the header and dragging into a new position They can also be removed via the Add Gadget interface or by clicking the x on the gadget s header Sub sections describe each available gadget WWW Sparrowiq com 13 Sparr sw 4 6 1 Top Conversations The Top Conversations gadget displays the top five pair of IP addresses consuming the network bandwidth for the appropriate time period The IP addresses in each pair are placed next to each other with an indication of the amount of data from each direction This is the default view of the conversation gadget but one may change to a pie chart if preferred by clicking on the chart icon on the top right corner of the gadget Clicking on any of the conversations IP address will take the user into the drilldown mode of the conversation pair See Section 5 for details on drilldown mode Clicking on Details will run a report for the same timeframe as selecte
39. tab on the Settings page If one or more processes are not running please restart Sparrow 8 Thegadgets on the dashboard contain the message Could not retrieve data or Loading a Click the Refresh button Note that it may take up to three minutes for initially recorded data to become available for gadgets and reports b Verify the probe configuration on the Settings Probe page 2 Why does the dashboard refresh so slowly a Severalthings affect the time needed to generate data for the dashboard including e Number of gadgets on the dashboard e Selected duration e Volume of network traffic recorded for the selected timeframe WWW sparrowiq com 34 Sparr cw IQ b Some web browsers are more resource intensive than others You can examine your browser s resource usage with the Windows Task Manager Restarting the browser may help 10 Why do lautomatically get logged out from my session a Your session with Sparrow is automatically terminated after 30 minutes of inactivity This setting can be configured on the Settings tab of the Settings page b You can only be logged in from one computer at a time If you log into Sparrow from a second computer your session on the first computer will be automatically closed 11 see alerts generated in Sparrow but lam not receiving any alert notifications v a email a Check the Email Setup tab on the Settings page to ensure that your email configura
40. till more than 9596 accurate Disabling this feature will restore the data for these reports Any changes to optimization level may take a few minutes to activate depending on the size of your database Delete Database this deletes all network traffic data stored on the database Max Database size This will set the maximum database size ranging from 80 GB to 160 GB Debug Logging This causes additional debugging information to be logged WWW sparrowiq com 28 Sparr cw IQ 9 3 Gateway Setup Sparrow can monitor and analyze traffic internal to the network local traffic Simply enable Gateway Monitoring and Show Local Traffic Note that the subnet IP address and mask needs to be specified for this to work accurately If your local network IP addresses use 192 168 1 xxx with a subnet mask of 24 255 255 255 0 you can specify subnet as 192 168 1 0 24 to monitor and analyze local traffic This feature also enables identification of incoming and outgoing traffic Note that this feature of gateway setup applies only to bandwidth traffic statistics and traffic volume graphs Welcome admin Logout Sparr my Dashboard Reports Alerts 0 Settings Settings System Status Settings Gateway Setup Name Mapping Port Mapping Service Mapping Groups Probe Email Setup Users Report Emails Internal IP Addresses Add your internal IP addresses and subnets here so that they can be Gateway Monitoring identified in your analytics Enable if
41. tion is correct Once configured use the Test Settings button to confirm that the configuration is working If the test fails an error will be reported that may explain the failure Remember to Save changes before testing b Some email providers require SSL or TLS Check with your email administrator to confirm the required security type and port C Checkto see that the email address specified in the alert configuration is correct Also verify that the value selected for Email me is anything but Never 12 Why do see license alarms on the top of every page Your Sparrow license has a bandwidth restriction When certain thresholds are crossed the License Warning and License Exceeded messages appear 13 Why does my bandwidth graph sometimes drop to zero a The Sparrow computer may have power saving features enabled that disable the hard drive or put the computer into hibernation mode Please check to ensure that these settings are disabled as they interrupt traffic monitoring b Alicense limit alarm may have occurred if the bandwidth of the monitored network exceeded the limits of your Sparrow license 14 received an error indicating that one of the Sparrow processes have died How do proceed a Follow the procedure for question 1 to ensure that all Sparrow processes have been stopped and restart Sparrow b If problems persist please contact us and provide as many details as possible at supportasparrowiq c
42. to be correct Sparrow does not currently advise if the report emailed has not been sent to the intended destination WWW sparrowiq com 3 Sparr cw IQ e Virtual box is not a currently supported virtual environment Virtual box does not generate a Systemld that will generate a valid full license e The Internet Explorer browser requires the user to input http before the ip address If entering http localhost 8000 some internet explorers may return an error message If this happens internet explorer requires the settings to be restored to default or the user can enter the direct ip address rather than local host Example Enter http 192 168 xxx xxx 8000 instead of http localhost 8000 1 4 Contact Information For technical support contact us at supportasparrowig com For all other information contact us at sales sparrowig com 2 Installation and Licensing 2 1 Initial Installation It is recommended that Sparrow be installed on a dedicated PC with a configuration that meets the Recommended System Requirements in Section 1 2 1 One can download a trial or purchase a Sparrow by going to www sparrowig com The package is an all in one solution and will install all the various pieces of libraries and software necessary for Sparrow to run Double clicking on the installation package will initiate the standard installation steps of license agreement target directory etc Software requirements for Sparrow includ
43. y Note that some time periods may not be available based on the license type 7 1 Email and PDF Reports The Run Report button is used to generate reports once the type and duration have been selected Once generated the user may save a PDF version of the report or choose to email a PDF version to a given address To save a PDF version of a report simply click the PDF button After a few moments you will be prompted to save a PDF file to the desired location Reports can be either emailed immediately or scheduled to be emailed periodically until canceled Before reports can be scheduled for email SMTP credentials must be configured See section 9 9 for details To email the report click the Email button fill out the form and Click Send A message at the top of the page will notify you that the email will be sent shortly It is imperative that the correct email address of the recipient be used To recipient 2domain com From example yahoo com Subject SparrowlQ Report ittachment Figure 17 Email Report The fields of the form are e To recipient s email address www sparrowig com 24 Sparrw From email address provided during SMTP configuration Subject subject line on the generated email Attachment generated name for the attachment Frequency How often the report will be generated and emailed Weekly and Monthly selections allow the user to select the day on which reports a
Download Pdf Manuals
Related Search