Hello,
Currently we have internet issues at two of our sites (poor performance, connection resets on both ends of the link.) When we first encountered the issue at one of our sites, we used the Solarwinds Engineers Toolkit to monitor the utilization of the link and it determined that our internet link was congested. We use Orion Netflow Traffic Monitor to monitor Netflow traffic. It looks like a really powerful tool, but unfortunately i'm either having difficulty interpreting the data or we don't have something set up correctly to monitor it as the results don't seem to account for the congestion we're seeing.
First, the setup:
We have a core router (Cisco 3745) with the following commands:
Interface (private network and WAN interfaces):
ip flow ingress
Global:
ip flow-export destination <IP of Orion NTA Server>
ip flow-export version 5
The core router is connected to a switch onthe private network and the WAN. The core router sends all traffic NOT destined for the WAN or the private network to our Cisco ASA 5510 , which is our security gateway (also connected to a switch on the private network.) I know the ASA doesn't support sending Netflow data on its own.
To monitor the internet traffic i've been looking on the private interface on the router (in NTA) and looking at the top domains and the traffic going across the link. Nothing there seems to account for the traffic we're seeing.
So my first question, I guess, is, is the way we have it set up now adequate for monitoring the internet traffic (or are some changes needed either on the physical side or software end) and, if so, are there any other effective ways of using this tool to monitor internet traffic that I can use?
