choly

Could you please specify a little bit more, what you mean by dynamic IP groups (and some usecase where it would help)? Thanks.

http://thwack.solarwinds.com/message/205098#205098 the TMOS 11.4.0 brings full support of the sFlow, NTA should than recognize packets correctly.

Fitzy, have you managed to upgrade to RC1 already? If not, try following: 1. Go to you additional poller which is hosting FSDB. 2. Run the installer with /StorageOnly option on that poller. 3. Once finished on poller, go to main Orion server and upgrade NTA there. 4. Go back to poller with FSDB (+ any other additional…

Hi John, There is curently not possible to hide AS 0 from chart, but there is possible to workaround - go to BGP summary view> open Flow Navigator> expandAutonomous system filter> fill in 0 (for Reserved AS), switch to exclude > Submit Now you have Reserved AS filtered out of the view > Open Flow navigator again > click…

Unfortunately NTA does not currently support sFlow from F5 devices. Simple reason is that F5 devices do not put correct interface indexes into flows (both input and ouptu are 0), so it cannot be paired with interfaces in Orion. I would recoomend to create a poll for F5 support on Ideas & feature requests page. Re: F5 sflow…

NTA 3.10 is able to receive flows from other IP (which belongs to the device of course) than Orion uses to monitor it.

The issue has been resolved into RC3, which is available on customer portal now

Hi Neeraj, based on your diagnostics, I would recommend flows storage on separate server having a quad core CPU, 12-16 GB RAM, 900GB of space for storing your current flows for a year. Make sure to upgrade to NTA 3.10 or 3.11 before installing NTA 4.0. (just a note here: your diags show 10k flows/s opposed to 687k you…

Choly Apr 8, 2014 3:24 AM (in response to jswan) There is a built-in NTA function to convert that for you ;-) SELECT g.name as Name ,dbo.ConvertFromIPSort(r.low) as Low, dbo.ConvertFromIPSort(r.high) as High FROM netflowipgroups g,netflowipgroupranges r WHERE g.ipgroupid = r.ipgroupid ORDER by g.name

It would be best to provide us with diagnostics from current NTA, so we can compute requirements for NTA 4.0 a bit more precisely. If you agree, please upload it to the leapfile (Using Leapfile to submit diagnostics) and let me or fcaron know. Thanks!

As you can see on y-axis, the unit is kbps, Mbps, the title is just written in uppercase (UI designers ). The endpoints resource is showing 'double data' by design, we should create an article explaining it. Basically: Endpoints always appear to show double amount of data (rate, bytes transferred, percent utilization),…

Use this one Cisco Nexus 7000 Series NX-OS System Management Configuration Guide, Release 6.x - Configuring NetFlow [Cisco Nexus 7000 Series Switches] - Cisco Systems

Rnas, folder C:\intepub\Solarwinds is default website location. The actual location depends on where you set the website to be located. You can find out easily by running Start > Programs > Solarwinds Orion >Configuration and .. > Configuration Wizard > select Website > Next - now there is field [Website Root directory] -…

Indeed, top XX endpoints show double rate, see last comment on: Re: Re: How can we interpret the statistics on Netflow correctly when using Steelhead ( Please help!!)

Please check new NPM 10.7 (RC currently) with NOC functionality - this should provide you what you are looking for - automatically refreshed view focused on displaying as much info as possible. Unfortunately NOC is not yet supported on NTA views. However if you place NTA resources on NPM view it will work just fine.

If you don't mind short gap in data, you can just turn off NTA service poller by poller, looking at last received time after 2 minutes, those devices which will show old timestamp belong to that poller.

Hi Muhammad, could you please check that flows from all devices are coming to your Orion server, using Wireshark (seeHow to Verify Orion receving)? If not check your device config/firewall settings. If yes, please create support case. Thanks. Re: netflow and CBQoS data are not available muhammadkhair.10 Dec 15, 2012 8:49…

To be more clear, the benefit of NTA 4.0 is that it displays CBQoS data in much better granularity than 3.X versions.

Hi Raul, could you please check that flows from all devices are coming to your Orion server, using Wireshark (seeHow to Verify Orion receving)? If not check your device config/firewall settings. If yes, please create support case. Thanks

Yes, this should be working just fine (use advanced alert manager - http://www.solarwinds.com/documentation/en/flarehelp/netflow/default.htm#orionnetflowphsetupnetflowalert.htm%3FTocPath%3…).

In some cases switching to jflow v9 may help (unless you are already exporting v9). jflow v9 is available in JunOS 10.4 and newer. Follow steps below on SRX device (Juniper Networks - SRX Getting Started - Configure J-Flow - Knowledge Base): Configuration example for J-Flow version 9: The following procedure provides an…

Hold on... The little exclamation mark indeed means ''caution, or not recommended". The problem might be in your backup folder, I see that you are trying to backup on network location. This is OK to do so, but make sure the shared network location is in same windows domain (perhaps other sharing options may influence it as…

Hi p01nt5h0t, This is an issue we are aware of, and we are currently investigating the root cause.

Quang, it is a bit silly workaround but should work: try to exclude all IP groups other than Group A and Group B. Using flow navigator, IP group filter, change include to exclude and add all other IP groups.

it would be the best to file a ticket with SolarWinds support. We would need to check your logs to see what exactly happened. Thanks.

Re: How to determine the maximum traffic received by a CBQoS policy over a period of time? thamizh85 Dec 6, 2012 10:15 PM (in response to Choly)Thanks a lot! Now I can get the report. But I just wonder whether the reported values are accurate or have been averaged out? Refer to my other question related to the same topic *…

Unfortunately there is currently no way to have NTA top charts sorted by anything else then bytes. It sounds to me like a nice feature request, so it would be great if you create a poll here on Thwack so others could vote it up

NTA only stores one of ports. The rule is following: "Not monitored or higher port number out of tuple [src_port; dst_port] is replaced by value 0, in meaning of random high port". Example: Conversation with src_port 80 (monitored) and dst_port 16542 (not monitored) is stored as 80-0, reported as http - random high port;…

Hi Jacky, please check following article, hopefully explaining why endpoints appears to show double data: Re: Re: How can we interpret the statistics on Netflow correctly when using Steelhead ( Please help!!)

Just proceed according to readme included in HF. Backup all files it tells you to backup. (You won't break anything if you backup extra files, however..)