darragh.delaney · Self

@"yumdarling" any ideas on this one. See my previous post

I ordered some items back in April but I never received them. This is the tracking number LM988160106US Order #1441-1588086192653 3 item(s) ORDERED 04/28/20 * THWACK Backpack * SolarWinds Blue Argyle Socks * IT Kong Shirt (XL)

My parcel is stuck in delivery since early May. I cant see any way to contact UPS via the webpage as I am in UK and they only deal with US queries https://tools.usps.com/go/TrackConfirmAction?tLabels=LM988160106US

I have the same issue. I lost over 30,000 points when the store changed over. I had purchased a backpack (25,000) and Blue Argyle Socks (12,000) but they never shipped. Now the points are gone and no sign of the order anywhere

We develop a tool called LANGuardian which can integrate with Orion based products. It delivers continuous network security monitoring using raw traffic, anywhere. At the core, remote sites, not just at the edge. Sample video here of how it can be used with UDT. LANGuardian Integration with SolarWinds UDT - YouTube Darragh

Hi John, Have you tried using a packet capture application like Wireshark or Microsoft network monitor to look at the traffic? Sometimes you can identify what it is by looking at packet content. You wont need to install Wireshark or network monitor on your servers. Just plug a laptop into the same switch as the server and…

Hi rhlee222‌ Akamai are a content distribution network (CDN) and the traffic could be associated with any one of their many customers (YouTube, Microsoft, others...). NetFlow tools will struggle with this as they do a reverse lookup on IP addresses. Interesting blog post at this link which explains more. You do have…

Hi There, This is something I come across a bit as it seems to be a problematic area for NetFlow monitoring. Do you know of the client IPI addresses in the NetFlow traffic match up with the client IP addresses in the Radius events. I recently worked with someone to provide reporting in this area. We ended up deploying a…

Hi There, When you reference a file server is it a Windows file server? A lot of the discussion so far has been about response time and packet loss which are important metrics. Your reference to bandwidth is also an interesting one. We develop a software product called LANGuardian which integrates with SolarWinds products…

Hi there. As has been mentioned in the previous response some of this could be down to protocol overhead. It does seem a lot to result in over double the file size. My thoughts on this is that you may be double counting or there is something else going on between the two Microsoft systems that makes up the other traffic.…

Even if the switch does not support NetFlow you still have a couple of options. The main feature to leverage is a SPAN port and that particular switch has the capabilities for two monitoring sessions. Using a monitoring session you can focus on a few ports or an entire VLAN. For example, let’s say I wanted to monitor my…

We have product called the LANGuardian which integrates with a number of Solarwinds modules including SAM. It captures and analyses traffic using Deep Packet Inspection and because it uses DPI and looks at packet contents, it can give you a lot of detail and visibility into network and user activity across your network…

Hi There, Agree with evanr there, UDT will keep a database of what devices are connected to what ports. When it comes to monitoring devices on a network we develop a product called LANGuardian which integrates with Orion applications. It uses a deep packet inspection engine to collect device and application data from…

Hi sotherls‌ Most of the interesting traffic from these clients will go in\out your Internet gateway so you could setup a SPAN or mirror port to monitor this. I would recommend packet capture over flow as you will be able to capture device information from HTTP headers. Hope this helps, Darragh

Hi pmartinez​ NetFlow is not an ideal data source for web usage tracking. Good post below which explains some of the reasons behind this. There are exceptions like IPFIX but you may not have this technology available. http://unroutable.blogspot.com/2012/04/why-netflow-isnt-web-usage-tracker.html​ A better option may be to…

As mentioned already, trying to track this and get the right level of visibility using IP ranges, port numbers is almost impossible. Netflow is really struggling these days to track Internet activity due to the huge growth in CDNs(Content Distribution Networks), increased use of proxies, etc. One really has to look inside…

Hi munna31 I don't know of a way to do this natively in SolarWinds products. I can offer this suggestion which involves the use of a third party tool which can be integrated with SolarWinds NPM, SAM, etc... Our LANGuardian product can accept a live flow of packets from a SPAN, mirror port or TAP. Alternatively, you can…

Hi morino.italis‌ When it comes to monitoring bandwidth per User and Application there is another option which involves a third party application called LANGuardian. It uses a deep packet inspection engine to capture user and application information from wire data. LANGuardian can integrate with Orion so you retain a…

Hi There, I often come across this too and the only solution is to use something which is application aware. You would need to use something which looks at network packets (deep packet inspection) rather than flows. By looking at the content it can be possible to identify what applications are in use. SolarWinds have…

Hi jdmarshburn1‌ Some info here but it looks like it is problematic. The possibility of slowing down the appliance is the one that worries me. How to monitor Cisco ASA Firewalls using NetFlow 9 and PRTG? | Paessler Knowledgebase Another option is to use a SPAN or mirror port to monitor the traffic going to and from the…

Are you looking for bandwidth totals per school district or is there another reason why you capture the flow stats? Another option you have is to do packet capture, setup a SPAN or mirror port and use this as a data source

Hi bud.lande As mentioned above you will need to use a SPAN, mirror port or TAP as a data source. We develop a tool called LANGuaridan which can detect SMB/CIFS V1 and you can integrate the reports into your Orion deployment. An example here on our online demo.…

Hi mespina‌ You may be able to do this using IP address groups in reports http://www.solarwinds.com/documentation/en/flarehelp/netflow/content/orionnetflowag-reportexample-ipaddressgroups.htm An alternative method would be to use something like LANGuardian to focus in on the Internet activity and integrate it with…

Hi There, When you mention users, do you want reports with usernames gathered from Active Directory or do you just want client IP addresses. The second question I have is, do you use proxy servers. The proxy question comes into play as your monitoring will need to take place before it hits the proxies. You may need to look…

Hi mnostrom​ We have a product called LANGuardian which can monitor both direct and proxy based Internet traffic. More in the video below. You can integrate any of the reports shown in the video into your SolarWinds views so you retain a single console for accessing both products. Darragh…

Hi There, You may have an option to enable NetFlow on that router. More info here Netflow config for 1941 Once enabled you need to use a tool like SolarWinds NTA which can take this NetFlow data and show you what data is associated with what PC. Note that this will only show usage at the edge (Internet) but looking at your…

Hi There, First up I am not sure why you cannot select the second NIC but I have an alternative that may help you troubleshoot. We develop a product called LANGuardian which can connect to a SPAN port and it can also integrate with SolarWinds. You can see an example of it in action here:…

Hi gaurav.ec.15‌ I'm afraid I can't answer your netflow-lite question but this community has a good few NetFlow geeks so you should get an answer shortly. An alternative to nprobe is a commercial application called LANGuardian. You can connect it to a SPAN or mirror port and use SolarWinds Orion to query the results. The…

The following example uses the native IOS command line interface to configure the SUP and MSFC modules of a 6500 series switch. This example is based on the Cisco documentation for Cat6500 w/ SUP2/720 running IOS 12.1. For further information, refer to…

Hi There, What type of Cisco device are you trying to enable NetFlow up on? Darragh