How can I get the SMBv1 traffic Source & Destination?

Hi Folks,

Using the Orion Platform NPM & NTA: 2020.2.4 how can I get the report of SMBv1 traffic Source & Destination on my network?

I need some steps and guideline.

Thanks.

Find more posts tagged with

netflow_nta

npm

nta

SMBv1

Accepted answers

radekn

Hello,

You may open flow navigator on NTA summary page, and in "Applications" drop down filter just specify ports the SMBv1 is using (137,138,139,445) and submit.

Then all resources(Top xxx Applications, Top xx Conversations ...) on summary page will display filtered data for SMBv1 and you can drill down from summary page resources to details pages and further analyze traffic

Regards Radek

All comments

radekn

Hello,

You may open flow navigator on NTA summary page, and in "Applications" drop down filter just specify ports the SMBv1 is using (137,138,139,445) and submit.

Regards Radek

itengineer

Yes, that is great, thank you @radekn