mcbridea

It looks like you are in the Edit Properties section of the Node view. Do you see the Custom Prop in the Node view? I am using ver 10.0

Hi branfarm, Can you open a ticket with support and let me know the number? I'll help get this corrected. Andy

I hear you. Everytime I start doing custom SQL reports I learn how much I have to learn about SQL. I'll forward this thread to Product Management for a feature enhancement request.

Hmmmm... I'll look into it. Andy

Yes - 95th percentile line means 95% of all data points are at or below that line. Very different than the average utilization. Average is the 50th percentile.

This is probably more than we can solve on Thwack. Can you call it into support? We can get it to the right people to help you, even if it is an evaluation.

The exporter must have the source IP, source port, sourceIf, ToS, dest IP, dest Port and protocol to show up in NTA. Several of these are missing from that export.

That's a great solution - and I'm not even a fan of Notes. ;)

Yeah - looks like the IEEE dot11 support is vacant. For an all around Network Management book I really like Cisco's Network Management: Accounting and Performance Strategies by Benoit Claise. I refer to it at least once a week. It covers SNMP and MIBs top to bottom and includes NetFlow, NBAR, RMON, and IP SLA chapters. I…

Please let us know when the final testing is done. Thanks!

Quite odd. I have never needed to reboot to get flows to export but the ol' reboot has proven to have strange results before. Is the lab router similar in IOS and hdwe to production?

Yes - that is true. Also be aware that it is easy to shoot yourself in the foot doing this. I recommend keeping a record of all the changes you make for backing out. Also some NTA upgrades may reset the parameters, so a record will come in handy at that point..

All - Be very cautious applying SQL queries that were created for one customer. This is not a recommended practice and may cause harm to your particular installation. . If we determine that a particular query will fix multiple customers with a specific issue we will release it as a KB or such.

Hi Bruce, We have reproduced the issue from your diags. It appears you have installed OrionNetFlowTrafficAnalyzer-v3.0-Web-SLX.exe, which only installs the extra NTA web server. This explains why it looks like an incomplete NTA installation. Install the full version of NTA and all should be OK. Andy

There is an "Allow monitoring of flows from unmanaged interfaces" option now that will allow this.

It is on the roadmap

Yes - that is true. It is just the way it works. That reset action would be an indication of a short outage. If you want to make sure you see both don't add any delays.

That sounds like an issue with the trigger action. Does this happen for all configured alerts?

The path operations require CLI because some of the data returned from the operations is only available in CLI. For other operations we get all the data from SNMP.

How are you testing the alert?

The way NTA works you must manage the exporting interface in NPM. What make/model of device is this? Your use case is a bit unusual. Are you evaluating NTA for a possible rollout to a server, or do you just need a NetFlow tool to use on your desktop occasionally?

No. A 32 bit app can only access 32 bit address space which is < 4GB.

That is it. Follow the Admin guide and you will be OK

We have to add some SQL that will take the configured circuit speed and divide the rate. I'll see what I can find. You're in luck - this week I'm researching reporting for a paper. Tell Phil I say hi too. Andy

If each switch is depedent on only one second level router why pool them?

Does your issue also involve a proxy server?

it is on the roadmap - no dates to share now.

I highly recommend doing this as an advance alert. First go into the Admin web interface and multi select the interfaces that are unpluggable. Then click the Display interface as unplugged..." button and submit. After that go to advanced alert manager and alter the trigger condition as shown above.

If the DOS attacks are saturating the link, the existing NetFlow alerts will work as they trigger off of a bandwidth threshold.

Great! I'll check and see if this in the KB system and remove PM review. Added KB 3292