davidmaltby · Principal Architect

But if you're looking for the NetFlow specific Database Maintenance then you'll want to run the following: C:\Program Files\Solarwinds\Orion\NetFlowTrafficAnalysis\NetFlowDatabaseMaintenance.exe (default location) It should be pretty self-explainatory once you run it. If not, let me know. Thanks, David

Thanks for the reference to Tftpd32. We could potentially do something very close to the same. Thanks, David

Yes. You can use the tool that you can download from the customer portal called "EOC Map Importer". It will convert your Orion 8.5 and 9.1 maps to EOC 1.0 maps. Then using Network Atlas, it can import them to your EOC 1.1. Thanks, David

Yes, this is a known issue. We have now made a fix for it and are testing it with customers that have logged the issue with Tech Support. Please open a support ticket to get it addressed. Thanks, David

So, the NPM account that you provide EOC, must have an NCM account associated with it. You can verify this by logging into the Orion web console with that account and then go to the NCM view. If you haven't associated an NCM account, then that view will have messages to first indicate which NCM server to use, and then…

I would first suggest that you use a sniffer like WireShark on the machine with the NTA service and verify that you are receiving the NetFlow traffic. If so, verify that the port that it is coming in on is the same that the NTA service is listening on (default 2055). Also, on the NTA home page are you receiving any alerts…

That is the default max size value for the queue that is in NTA queue. This means that the service can't keep up with the NetFlows that it is receiving. For this release, we have some performance issues and are continuing to address them. There are two things that you can do, in an attempt to midigate this issue, if you…

This is very good information. Thank you for documenting it in such detail. Can you look through your details table for this new node and see if the TotalBytes column has negative values? If so, then this would help rule out the web page code for being at fault. For this chart, and from what you know of your network…

The Procurve family sometimes supports a protocol called sFlow. I did a quick lookup and it appears that your model doesn't support it, but don't use me as a definitive answer by any means. Here is a link to what I used: http://www.procurve.com.sg/pdfs/competitive_sales_guide_may2006_US.pdf Anyone else out there know more…

We're not storing URLs, but we are storing the endpoints of the traffic. I haven't got a chance to rewatch our video, but I'm pretty sure that what you saw was the Top XX Domains resource that was showing you youtube in the video. Thanks, David

Hmm.. that must have been an older copy of the Admin Guide. I had this discussion with our doc folks many months ago and we verified that this is not a limitation anymore. At that time, they took that comment out of the Admin Guide. Today, they just double-checked to verify that it was removed. Thanks, David

Can you look at the log files to see if there is anymore information? Look in the install directory under Logging\TFTPService.log* Like Mark said, TFTP Server is intended to be run with administrative priviledge, but I'm will to help explorer the cause of your issue here. Thanks,

You can try out their evaluations to see how you like the tool now. Thanks,

The last word that I got from our Product Manager was: "The ESX server’s flow support is in beta and the results are sporadic. Our next steps are to wait till ESX officially releases flow support, and then test with NTA again." Ref. (SolarWinds NTA PM - March 27, 2008 ) When our lab manager was testing this, I don't…

Transmitter = endpoint that is a source of traffic Receiver = endpoint that is a recipient of traffic For example, as I understand it, if you had a user on the solarwinds.com domain and they were streaming from itunes.com, their box, with its assigned IP, would be a receiving endpoint, or receiver. Likewise, if they were…

I haven't seen this issue before, and am not sure what is happening here. But you may be able to workaround it by going to Admin\Manage Views. In the Mange Views list select "NetFlow Traffic Analysis Summary" and click the Edit button. I'm curious, so let me know what you have for the widths of the first and second column.…

Spincoach, We believe that we already have seen this issue before, but would like to make sure that it is the same issue. Can you lookup the values of the following on the device and let me know what they are? rttMonLatestHTTPOperSense.<opNumber> (1.3.6.1.4.1.9.9.42.1.5.1.1.6.<opNumber>) rttMonLatestRttOperSense.<opNumber>…

This is a known issue. If you restart the "SolarWinds EOC Services Host" service, then the message should go away. Thanks, David

Thanks for pointing this out. We've now created an item to track this issue in development. Thanks, David

Can you provide more detail here? What version are you running of Toolset? I've tried to reproduce with 9.2, but am unable to. I've run the app with multiple instances, and exit them in different ways, but for me the process ends normally each time. Are you able to reproduce this issue each time you run and exit…

This may be an issue that we saw in the beta where the SQL Server wasn't able to keep up with all the NetFlow traffic that we were trying to store. The database bottleneck was causing NTA to queue up more and more data that it was trying to feed to the database, but over time it caused the NTA service to grow and grow in…

I'm trying to understand what you are saying. What happens when you click the actual device? Does the browser time out or what comes up? Maybe you are actually clicking on a sub-map? If clicking on a map element doesn't go to where you'd like, you can always right-click on that element, select "Properties...". Then go to…

Development has addressed this issue and the fix is available in our NTA 3.0 RC1 release. We are in early stages of regression testing for NTA 3.0, but expect that we will RTM in the near future. Thanks,

Does your Top XX Domains show this missing R as well. I haven't looked at other domains yet but am not seeing this problem for ours.

I instructed QA to try to reproduce the issue from the information you provided. Here are the steps that they took: 1. Install Orion 9.0 SP2 2. Install VoIP 2.0 SP3 3. Install Netflow 3.0 SP4 4. Remove NetFlow 5. Remove references from the registry 6. Reboot VM 7. Reinstall Netflow 3.0 SP4 8. Reconfigure NetFlow. We…

You'll need to contact tech support. They'll get you NTA 3.0. Thanks, David

We support NetFlow V1, V5, V9, JFlow, SFlow, and in the next release IPFIX. Thanks, David

So if you know the subnets that your company uses, then you can just filter directly in the NetFlowDetail & NetFlowSummary tables for what you want. For instance: SELECT * FROM NetFlowSummary WHERE (SourceIPSort >= dbo.ConvertToIPSort('1.2.3.1') AND SourceIPSort <= dbo.ConvertToIPSort('1.2.3.255')) OR (DestIPSort >=…

We have investigated the issue before SP2 and made an attempt to help mitigate it, but during those investigations, we did find that these deadlocks didn't cause the NTA service to lose any data. The transactions that are victims of the deadlock here are re-run, so the integrity of the system remains intact. Did you see…

Yes, the service should be on and not stop unless there is a problem. We currently have a bug that has a workaround. Could you look in the NT Event Log to see the error message that is comming from the NetFlow service? It is under the Control Panel\Administrative Tools\Event Viewer. Thanks, David