The NetFlow Traffic Analyzer (NTA) product does exactly that. The free tool is intended to be a trouble shooting tool. NTA is a long term, miltiple interface analyzer.
NTA runs as a module on NPM so make sure you DL NPM as well if you don't have it. You can DL both from the the NTA page.
http://www.solarwinds.com/products/network-traffic-analyzer/info.aspx
Thanks. But can I configure NTA so that it captures data directly from Netscaler? From what I understand it doesn't do the same thing as AppFlow Analyzer does.
And according to the below, I am supposed to be able to change the location of capture files. I just can't find the Capture file field anywhere.
Storing NetFlow Data
Real-time NetFlow Analyzer stores up to 60 minutes of captured data in Microsoft Access-readable capture files. You can modify the location of capture files by changing the path displayed in the Capture file field of the Real-time NetFlow Analyzer user interface.
Ah! I see now . This may help locate the files.
http://en.wikipedia.org/wiki/Microsoft_Access#File_extensions
I found it finally. Thanks.
We actually did purchase NTA as well, but from what my team gathers, NTA is unable to intepret the traffic coming from the Netscaler. Does it require any special configuration?
If there's a way for AppFlow to store more than 60 minutes of data that would be great.
NTA can accept flows from any device the realtime tool can.
Total brain **** on my part - I was reading Appflow as NetFlow. More coffee.
so the answer is no then? our goal is to be able to provide report over a long range of period on traffic from our netscaler whether using appflow or NTA.
I'll make this for a PM to comment on.
Would like a firm answer as soon as possible. Thanks!
i guess there's no real solution to this. :(
We are interested in collecting long term Appflows in NTA as well. Any updates that can be shared with the forum?
Thanks!
A while back, I spoke briefly with the PM on adding AppFlow support to the NTA module, and was not pleased with the response.
Please escalate this feature request!
I sent this note on to the NTA PM to respond regarding that product.
Unfortunately adding support for AppFlow is lower on the list than other priorities at the moment. It has been gaining traction among more users recently and that's great. The more we hear it the higher it moves up the priority list.
Keep the requests coming!
I am confused by a recent marketing mail out from Solarwinds. It reads as follows;
"Now that you have had some time to use Real-Time AppFlow Analyzer to capture and analyze up to an hour of AppFlow data, find out how SolarWinds Netflow Traffic Analyzer can capture data from continuous streams of network traffic"
To me this sounds like NTA can process AppFlow records. Although if you add a Netscaler to NTA it displays and error saying that the IPFIX template is invalid. I realize AppFlow is an extension of IPFIX, so which IPFIX templates can NTA process? Can you please clarify?
Thanks
I apologize if the marketing email was misleading. NTA cannot accept AppFlow data at this time. The point of this email was to make sure people who were using AppFlow knew we also had NetFlow and sFlow monitoring.
Reading some of the other posts in this chain, I see that incorporating Appflow into SW NTA is a low priority.As Citrix/Netscaler become more and more of a larger foot print, especially in larger environments, if they aren't already, it becomes more and more of a challenge to correlate the user progressing through this environment to the backend. Granted Citrix/Netscaler has their own tools, but for true rca, which I think SW certainlys aims to be, I think, hope, and wish SW adds this capabilty sooner than later.
