cnorborg · Network Professional IV · ✭✭✭✭✭

Comments

  • Hmm.. Venturing a guess here. Thinking if you choose to enable the "whitelist" feature in UDT, that any devices that are not "included" or "ignored" would be considered "rogue" devices...
  • Well, I never said it was creating new tables, I said it was creating NEW rows in ANOTHER table (or tables). Specifically that based on the SQL output of a JOIN between the Nodes and NCM_NodeProperties that you would have to at the very least create new rows in the NCM_NodeProperties table, possibly more tables than that…
  • I'm being told that its not showing the traffic because of the way we're doing our routing on our network? That really confuses me. I would think that a Netflow packet is just that, a Netflow packet. If a Netflow system receives it, it should process it and associate it with an interface or router no matter what. How we…
  • Yea, I've been tempted to tell them we should turn it into an ESXi host to get better use out of it, but they like doing things in a bit of an odd way here sometimes...
  • Like all websites and such it can feel slow at times, while solarwinds is an awesome platform to work on, you sometimes get some hung processes and such, or our WAN bandwidth might be a bit slow, I sit ~1700 miles from our datacenter where our server is. So there are a number of factors that might make it slow for me.…
  • Sure, no other lines like "ssh version 2" or "ssh timeout". That doesn't work for me at all... I think this is fairly limited. It will tell you if something other than ssh followed by your two IP's/netmasks with "something else" (ie: .*) behind it exists. Doesn't tell you that your two do exist, which admittedly you can do…
  • Hmm... Coming from a high-security gov't environment that required the use of two factor authentication, I might have a bit of an idea where you're going and you might not like it. In our environment the ability to make changes en masse like that would have been against our security policies quite simply. Now, we might…
  •  Have you tried the Engineers Toolset "Update System MIB" tool? Allows you to set things like location via SNMP assuming you have write privs on SNMP. I've found quite a few devices to be lax in that respect and have been able to take care of quite a few of my problem nodes this way...
  • With a loopback address, you usually have a big subnet declared for just loopbacks. Let's say 10.100.100.X. Then you'd configure each loopback up as a /32 like this: int loopback0 ip address 10.100.100.1 255.255.255.255 Add it to your routing and that's all you need really. So, if you have 150 locations with two routers…
  • Your original SQL is probably good, has a couple custom fields I don't have so I had to modify it a bit. You need your icon set up like this, with "/Orion/images/StatusIcons/{0} " in the box below "Generic Icon".
  • I agree, would love to have this feature available. We just merged with another company and at all their sites they use 192.168.1.0/24 for their guest wireless networks. Our firewall engineers like to use the same addresses over and over for cluster heartbeats on our ASA's and such. Lots of reasons you might want to ignore…
  • Well, my interpretation of what UDT is doing is that it should be reporting on the last known location that a given node was at. Of course that depends on a lot of things like how frequently you poll and such. I'm choosing to not poll that often, so my info gets outdated. I also quickly ran into problems where it was…
  • RichardLetts‌ is correct, the FSDB specs do say 16Gb of RAM, so any box you put that on should have that amount of RAM. The FSDB doesn't need a SQL license at all (especially since it's not SQL!), it includes everything you need for running the FSDB for NTA... silverbacksays‌ gave a good link for sizing recommendations.…
  • Hmm... The rule Jiri gave might help in some instances, but not others. Shows off some weaknesses in the NCM engine I believe unless there is a way to fix it that is escaping me. First I'm going to proselytize a bit on writing secure rules and being careful with regular expressions. In the string matching rules cvachovecj‌…
  • Remember that SWQL is NOT SQL. There is a subset of functions available to the queries that you do. In this case the LEFT function is not available, so you'd need to figure out how to substitute it. Sometimes its easier to do it in the programming language you have wrapping this query, sometimes in the query. I can't think…
  • If the IP address conflict was from two devices on the same L2 network segment or LAN and looks something like this: %IP-4-DUPADDR: Duplicate address A.B.C.D on Ethernet0/0, sourced by xxxx.xxxx.xxxx The xxxx.xxxx.xxxx is the MAC address of the device with the duplicate IP address. This message is generated because 2…
  • It's pretty easy to set custom properties by other methods, either the custom property editor or via an alert. For instance, based on the node name, when a node is added we can set a custom property of who is the responsible party. If the node exists and doesn't have the custom property set, an alert is triggered which…
  • In case your wondering, that was old school HTML. Just changed my "Body" type in the message editor to "HTML" and did an <img src="URL">; and it acts like an image was pasted in there..
  • That looks pretty normal, I don't think you need the "ip flow egress" unless this is an MPLS network, can't tell from the config - looks like frame-relay. This is a network "stub", ie: no other networks beyond it, or more specifically, no other Netflow sources beyond it like Layer-3 switches? I am assuming the 0.0.0.0 on…
  • Did that still no luck. some one told me @ solarwinds support to replace the something.SDF file. any one tried that ? Yes, that worked for me. They had to send me the file though - it wasn't on my installation...
  • Well, steps 1 and 2 are done on the Orion server, not the device your polling, so "no ip domain-lookup" will have no effect on these steps. The reverse DNS lookup is done on the polling IP and the forward DNS lookup is done on the results from that. Step 3 is the first place it polls the device and this is what it usually…
  • Pointers? Find a programmer? Or at least someone comfortable with scripting... This isn't a simple flag your setting in an SQL row, you're creating rows in another table altogether based off the results of another query. The SDK has a bunch of benefits over raw SQL as cvachovecj mentioned, this type of task wouldn't be…
  • That got me thinking a bit and did a bit of research on XML in SQL databases. A bit easier if the XML is actually stored in an XML datatype vs the nvarchar this field is stored in, but luckily a "CAST" seems to work. Try this, I think it actually works!! Might need some tweaking, esp. changing <YOUR RULE NAME> to a…
  • Hehe, my brain couldn't wrap around the "I P to V'ed" you had there. Kept wanting to change I P to "IP", which made the rest of it make no sense! Funny how your brain targets things like that, since I work with IP addresses all the time I just automagically did that! Not to mention all the server guys here write it as…
  • I guess that would bring up another question, if Lat/Long tables are populated as it find the nodes (I'm guessing), I'm hoping it keeps track of if there is a change in the SNMP-location field and does another lookup? Of course ideally I would like to see in the future, if this is how its done, the ability to override and…
  • Yes, probably the default gateway is set wrong. Set it up this way... set ip route 0.0.0.0/0.0.0.0 <ip of gateway> Should work... 
  • Right, but why would you downgrade to 3.2.4, does it not have the problem that later versions are experiencing?
  • Oh, interesting, does it work on 3.2.4? I didn't even think of looking at an older version.
  • Well, the problem is that RTCD is not part of the regular events or alerting system, so its not very customizable. Nor could I find an alerting condition that was "Config Changed", although that might be a really nice addition!! Maybe you should create a feature request with this... Now, that being said, there is quite…
  • Ok, another potential clue, but I'm not sure where it takes me on this problem... I did notice that after I configured up our main 7600 router, that Orion NTA seems to be seeing all of the data from it just fine. The main difference between this router and our others (7206, 3825, 2801's) is that back when we configured it…