choly

Hi Barry, could you please add a little bit info? 1.From how many nodes do you currently receive netflow? 2.What is your average flows per second? (check performance counter 'PDUs processed per second' in 'SolarWinds Netflow Averages' category using perfmon) 3.How many nodes exporting netflow would you like to add? 4.How…

Hello, we are really pleased that you like our product :-) As for Juniper QoS support, we would appreciate if you could send us a SNMP walk (a simple snmpwalk tool is included in your Orion installation folder) from some of your devices, so we can investigate our options. You can also create a poll here on Thwack, so…

Unfortunately it is not currently supported to have each view filtered differently in NOC. I'll take it as a feature request.

Hi AddyRocker, the difference is simple - unit conversion. Apparently your RADIUS reporting uses base 1024, but Orion family products use base 1000 (see table on the right: Kilobyte - Wikipedia, the free encyclopedia) to convert bytes to KB, MB, GB. So where NTA shows 1.6 GB transferred, in fact it is 1,600,000,000 B (+-…

Hi Chris, this is caused by way how NTA currently stores data in SQL server. By default it stores 1 minute samples, by after 1 hour it aggregates them and store as 15 minutes samples, after a day it goes to 1 hour samples, and after 3 days the data are stored as daily samples. Only sample start time is preserved during…

There is already a request for that funcationality here: http://thwack.solarwinds.com/ideas/2433 Unfortunately NTA does not currently support netflow from WLC.

Hi, technically it is possible. However you should count with extra RAM taken by Flow Storage (up to 80% by default), so your SQL can possibly loss some of its performance. Also put Flow Storage on different disk than SQLDB. So to answer the question - possible but not recommended. Re: NTA 4.0 Flow Storage Server…

SolarWinds Knowledge Base :: NetFlow Interface resource(s) show utilization peaks higher than NPM utilization or higher than the interface bandwidth Most probably you don't have active timeout set to one minute on your devices.

I would agree with proposal, just try to pick faster D drive - 15k RPM or RAID 0 / 10 will ensure you will be able to load data quickly ;-) Also if you are going to use virtual hdd it really helps if you statically allocate its size or perform full format first time you add it into VM OS. Correct Answer Helpful Answer *…

sFlow format is much different from NetFlow, that why Wireshark has separate parser for sFlow, to see the content of the packet right click it, select Decode as.. > last tab > select SFLOW from the list on the right. Now for NTA: NTA is able to process sFlow if it contains information required by NTA, typically TCP/IP…

Well, a node will be listed in NetFlow sources in case you've been receiving data from in past or if you've checked to receive NetFlow/CBQoS from this node in Manage sources. To get rid of it (in both cases), please go to Manage sources (top right button on NetFlow sources resource) and uncheck the check-box in NetFlow and…

Have you already tried to contact SolarWinds Support?

Hi, you can use report scheduler for that. In NPM 10.6 and newer it is available at http://Orion_server/Orion/Reports/Scheduler.aspx > New schedule > Assign webpage > insert link to your beloved view (e.g. http://Orion_server/Orion/TrafficAnalysis/NetflowInterfaceDetails.aspx?NetObject=NI:1) and follow the rest of the…

Reason is simple: C:\Users\Me>ping hulu.com PING hulu.com [23.63.99.184] C:\Users\Me>ping -a 23.63.99.184 PING a23-63-99-184.deploy.static.akamaitechnologies.com [23.63.99.184] The hulu.com is hosted on akamai servers, so reverse DNS lookup returns akamaitechnologies.com domain instead of hulu.com. NTA obtains…

Hi Patriot, Depends on what you expect to see as a result: * If a single application covering all these user groups, then you need to create extra group containing all those users, and specify it as both source AND destination group or that application. Thus every communication on given port that will have either source or…

Yes, NTA expects flows to be sent every 1 minute. Otherwise data will be shown as spikes and blank spaces.

Apparently for some reason your Orion is getting another set of interface indexes via SNMP than is actually stored in interface fields in flows. This is just fine in case you do not need to monitor the interface via Orion for status and other statistics, just for netflow data. Do you see the VLAN interface when asking for…

Brent, let me try to answer your questions: 1. You are right, Flow Storage DB is lightweight single purpose database, maintained mostly automatically, so its management is mostly about giving it enough resources (especially well sized fast disk drive). There are multiple performance counters that could be used for FSDB…

You can use Top XX Protocols chart set to show top 100 (typically no more than 20 protocols are used), and set it to area chart + time period of your preference.

Interesting request. Indeed currently not possible, only using virtualization..

Based on the event, you are having both Interface Indexes = 0 in exported flows. Please check SoftFlowd documentation/support how to set it to export at least 1 of those interfaces with non-zero value. check following: http://gpo.zugaina.org/net-analyzer/softflowd/ChangeLog…

Hi, Could you please open a case with solarwinds support? They will definitely help you. If you cannot contact support, please send me a the log file via PM. Thanks.

Hi, this seems to be corrupted Orion DB, the easiest solution will be to contact support and they will guide you to create a fresh DB.

Please send this question to NPM forum. This feature is outside NTA.