choly

Install Wireshark on Orion server (and additional poller if you point some netflow there as well), and verify you are still receiving flows from those device. Using filters like ip.src==AAA.BBB.CCC.DDD && (cflow || upd.port==2055 || udp.port == 6343 || udp.port==9996) to go find out if you are receiving flows from each…

Those interface utilization numbers comes from NPM, so try to debug there. Maybe you are not getting all the SNMP data correctly.

Hi Sillz, behavior you've described corresponds to quite common mistake done in device settings - exporting flows interval is not set to 1 minute. For Adtran device you should includeip flow cache timeout active 1 to device config. For more details and config examples please see SolarWinds Knowledge Base :: NetFlow…

Hi, You can create a special account called directlink which will bypass login screen for guests, and share any particular NTA view/chart live on your webpage (using iframe).OrionAdministratorGuide.pdf page 364. To obtain single chart URL, click on its title.

Hi, apologize for inconvenience, we generally do not include this info into release notes, but rather into minimum requirements section in admin guide, but thanks for letting us know and we will consider adding it to next release notes! You can find compatibility matrix of all SolarWinds products in this SolarWinds…

Flow Navigator > Domains > include: mozy.com > Submit

Interesting. What NPM version are you running?

Hi, the NTA 3.x only could show data except last hour in Reports. Even if the report is called Last 24 hours in fact it is Last 23 hours (with the most recent hour of data missing). This was due to technical limitation and also reports would be much slower. NTA 4.0 however takes away the limitation, and is much faster at…

Well, the closest I can think of is parsing that info from NTA.BusinessLayer.log files I remember the service is regularly logging that node xx is added into cache because it is still receiving flows from it. You might give it a try.

Hi Jswan, Thanks for your feedback! This zoom thing is currently by design, but based on customers feedback like this, we will consider modifying this behavior. * Re: Slider Bars in NTA 3.10 Views jswan Oct 8, 2012 11:47 AM (in response to Choly)Thanks for the response Choly. I definitely think it should be configurable.…

The current situation is caused by someone let run 'Enable All Monitoring' which will monitor all those higer ports, one-by-one. Use 'Monitor recommended ports' to return to default settings (ie. well known ports + few multiport applications). JustinY (to Choly) 3 months ago That's exactly my problem. I do have a…

Quad-core CPU, 8 GB RAM, and 60-80GB HDD for data storage should be sufficient for you. To get better performance you can increase amount of RAM.

Hi Vidar, Is there any reason why Netflow should disregard tiny transactions like these? Yes, it is., process called Top Talker Optimization. With default set at 95% it stores flows which creates 95% portion of total bytes of incoming flows. This works just fine for most of our customers, however if you are interested in…

Hi Francis, We had some problems specifically with Juniper sampling rate, this should be fixed in NTA 4.1 so NTA will recognize the sampling rate automatically and adjust the traffic rate level accordingly. If you are running on NTA 4.1 already, please provide a pcap (or open a support ticket).

No, it won't help you. You can do priority lookup on individual endpoints on endpoint details view, use flow navigator to get there.

Hi Felix, I know this is a little bit tricky, but let me explain that: When resource is loading, it needs at least two amounts of bytes in two different times to construct a chart (otherwise the chart will always start in 0 value). It is better visible when you switch chart to show amount of data instead of rate - you will…

No, other hotfixes should survive CW just fine, but if you had any buddy drops from solarwinds support then it has to be reapplied after CW.

Not really sure about that, but I would try removing "collect transport tcp flags" and "collect interface output" from the flow record and re-apply on vlan interfaces.

Hi Will, Unfortunately currently available NTA versions just don't support auditing yet, so you won't see any auditing events in message center. Hopefully this feature will become available in one of future releases. * Re: NTA audit trail, where is it? wluther Feb 25, 2014 1:14 PM (in response to Choly)Choly well poop!!!…

Hi Vladimir, when comparing data from NPM and NTA it looks that NTA reports 100x less data (keeping the actual traffic shape the same). I think that this could be caused by flow sampling. In NTA 3.11 we added more support for sampled flows (so it should be automatically scaled up to match real interface utilization),…

AS2906 Netflix Streaming Services Inc. - ipinfo.io‌ you can try to create an IP group with following ranges.

Hi TIA, check what bandwidth do you have for the interface. Orion > Node Management > click [+] next to node which contains this interface > check the checkbox next to interface > click 'edit properties' on top bar > check values in In/Out Bandwidth. Most probably the value there is 1000 or so bigger than real interface…

What firewall ports do I need open to connect to Office 365 for Education? - Microsoft Education in the Cloud - Site Hom… So beside of port 443, there are few more. Additionally you can create and IP group of Lync servers, and use it together with port definition to improve the application def.

If the IP header of flow packets won't be changed (i.e. the flow sender will be still the original address of the device) it should work. NTA has no problem receiving flows on other poller than one used for rest of SNMP polling in Orion. If you plan to redirect flows between APs often and you are using v9 or IPFIX, I would…

Hi, this coud have about three reasons from top of my head: 1) you have licensing issue, e.g. NTA licensce doesn't match volume of NPM license; Fix: obtain correct license 2) you have changed IP address/hostname of Orion server or migrated to another server keeping old DB; Fix: Either contact support to solve this, or go…

Hi Andrew, the alert you want is built-in in your NTA already. It is called High Receive Percent Utilization with Top Talkers/ High Transmit Percent Utilization with Top Talkers. It is capable of sending email with 5 minute snapshot of top entities for interface which triggered alert. Please check NTA admin…

Sounds stupid, but check if all those servers are using same time, timezone, DST setting. Re: Netflow charts on fitzy141 Apr 16, 2014 12:07 PM (in response to Choly)good thought didnt check that .. but i think I am ok also checked to make sure current versions of NTA 4.0 - opened a ticket with support as well * Re: Netflow…

Hi Kevin, Depending of NTA charting settings it can either represent relative percentage (default) this row bytes / all transferred bytes for specified period and filter or absolute percentage of this row / sum of bytes of all rows displayed under chart. (refer NTA admin guide p. 57 for more detail) On interface detail…

Hi Memow, Please post here also URL which leads you to that error (you don't have publish hostname, but the url contains filter which we want to inspect) + NTA version you are currently using. Thanks!

Hi Shawn, thanks for your feedback, I am sorry for troubles caused by dropping 32bit support, hopefully you will enjoy the performance and data granularity boost which 64bit version brings thru Flow Storage Database (FSDB). Unfortunately NTA needs you to run main Orion and all additional pollers on 64bit servers, so I am…