Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

NetFlow aggregation

Is there a way to summarise the NetFlow data and display an aggregation for the domain. As an example searching NetFlow for *.youtube.com displays each sub-domain.

The end goal is to see how much data is being transmitted to/from youtube.com.

ash-v177.ash.youtube.com (64.15.119.104)
ash-v178.ash.youtube.com (64.15.119.105)
ash-v179.ash.youtube.com (64.15.119.106)
..
.. (100's more)
..
sjl-v150.sjl.youtube.com (64.15.120.53)
sjl-v152.sjl.youtube.com (64.15.120.55)
sjl-v81.sjl.youtube.com (64.15.120.88)
sjl-v82.sjl.youtube.com (64.15.120.89)
sjl-v85.sjl.youtube.com (64.15.120.92)
sjl-v86.sjl.youtube.com (64.15.120.93)
sjl-v87.sjl.youtube.com (64.15.120.94)
sjl-v88.sjl.youtube.com (64.15.120.95)
sjl-v91.sjl.youtube.com (64.15.120.98)
sjl-v94.sjl.youtube.com (64.15.120.101)
sjl-v95.sjl.youtube.com (64.15.120.102)
sjl-v98.sjl.youtube.com (64.15.120.105)
www.youtube.com (208.65.153.240)

Find more posts tagged with

Accepted answers

BryanBecker

Here is what you can do :

Go into the NTA tab. If you don't have this already you need to add the Traffic View Builder view to your NetFlow Traffic Analysis Summary view. You can do this via the admin page.

Once you have Traffic View Builder you can build a view by dropping the list down and select 'Domain'. You can enter 'youtube.com' in the domain name. You select the vlan that leads out to your Internet. For me I'm netflowing from the VLAN to the firewall that leads all associates to the Internet.

That will give you total traffic over x time (depending on what you selected).

Hope that helps.

All comments

BryanBecker

Here is what you can do :

Go into the NTA tab. If you don't have this already you need to add the Traffic View Builder view to your NetFlow Traffic Analysis Summary view. You can do this via the admin page.

That will give you total traffic over x time (depending on what you selected).

Hope that helps.

CPJ

BB, this is exactly what i was after.

Thank you so much for your help.