The most recent content from our members.
Hi All I'm having a problem with NTA last xx conversation report. it keeps generating conversation for accounts that have been disabled. i did check DNS and DHCP and deleted any records related to these disabled account but NTA keeps reporting on them. have anyone came across this or know where the problem could be? Thanks
Hello, I am trying to run this query in SWQL: SELECT TotalBytes, TotalPackets, SourceIPSort, DestIPSort, Protocol, ProtocolName, SourcePortName, DestPortName, SourcePort, DestPort, SourceAppID, DestAppID, StartTime, SourceSinglePort, DestSinglePort, DisplayName, Description, InstanceType, Uri, InstanceSiteId FROM…
I'm looking at a netflow conversation between two machines I'm told don't have IPv6 enabled. Yet this is what I see in Orion (tons of N/A). Was this IPv6/HTTPS or was something else missed? I've never seen a conversation show up like this with zero port information. In comparison, here's another conversation:
It looks like you're new here. Sign in or register to get started.