We have a NetFlow node that recently started having traffic spikes, but NetFlow fails to see it. Why is this? Usually this interface idles at ~3Mbps up/down so we would like to see what is going on.
NTA chart:
NPM chart:
1) Are all interfaces sending flows?
2) Can you move from Egress to 'Both' for the NTA chart?
I'm suspecting that your NTA chart isn't showing the full picture. But that's just a guess with the information provided.
-ZackM
Loop1 Systems: SolarWinds Training and Professional Services
I've got the same issue just upgraded to 4.0.3 from 4.0.1. I have a support case open but no feedback yet.
There is only one interface in use on that router, and it is sending flows. Also I can't get the chart to show both... what's going on?
you might try running the configuration wizard from the orion server. log in to the orion server start>programs>configuration and auto-discovery>configuration wizard. once it start select all three options to run against: Database, Website, Services.
is it possible to post the config snippet for the router's NetFlow and the specific interface?
ip flow-cache timeout active 1
interface GigabitEthernet0/0/0
ip flow ingress
ip flow-export source GigabitEthernet0/0/0
ip flow-export version 9
ip flow-export destination 10.x.x.x 9996
line aux 0
flowcontrol hardware