AlbanyNYMike

"Was the traps page not displaying any traps?" We currently have 2 Orion issues. 1. The website times out daily, and need to restart IIS. 2. The traps page does not display. It times out everytime. Tickets are open for both issues. Running 9.5 SP2 HF1. Whats this I hear about SP3 possibly resolving the trap issue?

So far, I am glad I stayed away form 9.1. Our VM guys have extensive VM monitoring of thier own and do not need Orion for that. The Advanced Syslog Parser, however, is essential to our datacom unit, and is used extensively. Esspecially sorting the various levels of severity as Sam stated. Shame indeed.

Warbird, have you upgraded to 9.5 SP4? I had the w3wp.exe issue once I upgraded to the 9.5 level. SP 1, 2 and 3 did not resolve. However, since installing SP4, I have not had to restart IIS or go into task manager and end w3wp.exe since. If your not running SP4, give it a try. It seemed to resolve my issue of w3wp.exe…

hi GZhytar, Thanks for the tips. For the record, we have dozens of schedule reports that get emailed daily and all works well for that. The problem is specifically with Netflow reports. Either custom ones that I create using the netflow endpoint template, or the default netflow reports. When I try to run one of the default…

I think everyone agrees that IPMAN looks great and does what it is meant to do. I dont think anyone would feel the license / price structure is fair. Also be sure to see the above thread regarding the bad practice of "omitting" IP addresses. The IP is still active and could be attached to a host, and you would never know…

That would be great r0berth1. I wonder what differences our configs have. You are seeing more than just broadcast traffic using that config? My export aburtly stops after about a half hour withthe config like that. I noticed that after the flow stopped being picked up by Orion, if I go on the core and do a Show IP Flow…

Those "out of the box" netflow reports (top transmitters , top receievers) are epic fails. Report writer times out, hangs, and just doesnt work. I tried changing it from top 50 to top 25 to top 10 to top 5. No luck. I tried applying a filter. No luck. I think we are just going to go with out netflow and give up. The…

My Mistake ET, I see what you are refering to now. Not creating a new report using the netflow endpoint template, but using the report out of the box, "top XX receiveres". Sorry about the confusion. It would be nice if the report writer had the same DB parsing capibilities are the website. The top xx endpoints resource on…

Masikak, I am not trying to be rude, but this thread is related to Netflow on a 6500 Cisco Core Switch. Not a 3600 or 1700. Your first stop for trying to implement Netflow on a Cisco device is www.cisco.com. They have a search feature with configuration guides. If you are still having trouble, perhaps someone at Thwack can…

Thanks SLXer, I guess I will need to brush up on my Netflow understanding. The image we are running on the 6513 does not accept the ip flow ingress layer2 command. I guess its time to hit the books, as implementing on the 6513 is very differant, and more difficult than the 2821 routers. Thanks again for all your…

Thanks Chris. Maybe a limitation on the image we are using, but the command 'ip flow ingress layer2-switched vlan x' is not accepted. From Config mode, the only command is 'ip flow-aggregation, cache, or export. From Config Interface VLANxx, the only command is 'ip flow ingress'. It will not allow the 'layer2-switched…

I second aLTeTeGo's opinion. So we wont see anything in Orion / EnergyWise, unless we have PoE devices connected to a EW enabled PoE switch? Makes sense I suppose.

Let me throw in another 2 cents. I also have 2 maps on the summary page like jcooler. To resolve, I open the task manager on the server, and end w3wp.exe. I then open the Orion Service Manager, and stop the IIS websites (NPM and NCM), wait for them to say stopped, then start them. I noticed selectiong "restart" has no…

ET, Thanks for the technical explination, but I dont believe you can use the report writer to get top recievers. When creating a new report using the Netflow Endpoint template, the only "traffic" field is for bytes transferred. There is no bytes recieved field. Has something changed with a the latest Netflow upgrade (3.5)…

Thanks SLXer, Without getting to technical, off the top of your head, do you know of a way to configure this to get flows from users who connect to the core switch through fiber trunks? We are a New York State Agency, and we have several offices through out the state. It was pretty easy to set up Netflow on these Far Site…

I have to agree with Dirty. I found a thwack post from 6/19 regarding high mem on w3wp.exe and the supposed "fix". I applied the fix yesterday, and have had to restart IIS 2 times since. Hopefully the SP will address this.

Great explaination Doug! So If I go back in and create dummy Passwords for all my Domain/user accounts, they will still get in using WPTA? 

AD integration is not supported in Orion. The behavior you described sounds normal for WPTA. Here are my experiences with WPTA: I set up accounts in the DOMAIN/User format with dummy passwords. If you want anyone in the domain to be able to use WPTA you can create a DOMAIN/Everyone account, if one exists in your AD…

I seem to be having the same issue. At the chassis level: HPL-2S-SPARE-3750#sho energywise Interface Role Name Usage Lvl Imp Type --------- ---- ---- ----- --- --- ---- Test3750 Test_Enegywise 89.0 (W) 5 5 parent At the Interface level: HPL-2S-SPARE-3750#sho run int fa1/0/1 Building configuration... Current configuration :…

Thanks for the suggestion kbrookov. It was close, and I was trying that wildcard originally in different parts. Peters "like '%dhcp%' worked perfect. Im not SQL guy, so this is pretty new to me. Not sure what the % sign indicates, but I knew my desired filter could not be that difficult to implement. Thanks!

Peter, Thanks as always! Your filters worked exactly how I wanted them to. I was close,... just missing the % signs. Thank you, Sir!

Yes, the config archive folder was on a network share. When logged on to the NCM Server, we had full visibility intop the share. I had opened a case with SW (79642) regarding this. Hopefully, future versions of NCM will have access to the network share from the website. The reason we request this is due to backup data. We…

Just wanted to throw my hat in the ring as another 9.5 SP1 user who is having the same issue. Case #101183. Website goes completely unresponsive. w3wp.exe over 250 -350 MBs. have to stop , then start IIS Websites in Orion System manager.

Thanks for the tip SLXer, I believe it is a layer 3 interface. It is a user VLAN (10.66.130.0) and connects to our core switch on blade one. on blade 2 is where we have all our servers (10.66.128.0) Blade 3 is our DMZ stuff, etc. When I used the config I had previously posted, the flows came to Orion for about 20 minutes,…

Same here. My Change Reports are full of Crytpo Key changes that no one wants to see. I attempted to filter but to no avail/

Thanks, that is good to know. I just dont understand how the website can parse the DB info and have pre-determined fields for "top convos, top enpoints, etc" but the report writer is limited in how it can parse the netflow DB info. Doesnt really make sense, that I can get on the website, open the netflow page, and quickly…

I had the same EXACT problem when I tried to enable RTCD in Cirrus v4.0 I believe this is a database permission issue. The NCM and NPM databases must have full access to eachother (i believe). If NCM DB does not have access to NPM database, your Orion server will jump to 100% CPU, and you will have several jobs running. I…

SO I think I finally got this set up correctly, but still have a question. I followed all the steps, added http://Orion Server as a trusted site, added the DOMAIN\users accounts with dummy passwords, then I removed the passwords after the accounts were set up. WPTA seems to be working fine, but if a pull up a login page,…

people need to remember to back there stuff up before attempting the upgrade. We have Orion on a VM server. I take a VM snapshot, which takes seconds, prior to the upgrade. If the upgrade works, great. If not, I revert to my snapshot, and in seconds, Im back to a fully functioning 9.1SP5. I will be attempting the upgrade…

Is the TC confusing WPTA vs. AD Integration? I have WPTA setup and it is working just as advertised. Users no longer need to 'login', as long as they are at a PC that they have logged into with Domain accounts. Users click on Orion quick links, and they are brought to thier home pages logged into Orion as Domain\user. Why…