tjbradford

if its an email notification, can you notjust use the adknowledge url option which will stop if from continuing to alert until another x amount of time (reminder) or until the alert is no longer present 

<span>ip flow-cache timeout active 1 </span><span><br /></span><span>this should fix it, this will take the information it knows about after a min regardless of if the session is still ongoing </span><span><br /></span><span><br /></span>

worth checking the 64 bit counter are supported first ? also the counters rolling over isn't a massive issue unless your poller is set to only look after extended periods of time there are two methods for dealing with counters rolling over method 1 is a difference sum, looks at what there was and what there is now after…

being that they are firewalls i'm guessing it's not something simple like a rule on them preventing anything from contacting them on the mentioned ip's equal to snmp traffic ? of course checking the community string is correct ? i know that most filewalls only accept requests and send logs to the address specified…

im pretty sure you need a command netflow something established 1 this will send the cache data of flows in progress, not just the ones after they have ended, eg copying an iso across the network.

you need to state that traffic from the orion box isn't interesting, i guess it's trying to reach / scan the subnet at the other end of those isdn interfaces, either remove the destination subnets so the orion doesn't want to look at that subnet or set a route / acl on the isdn routers to state that orion shouldn't be…

open network config manager goto start / settings / select security / tick box "hide passwords" / click ok done ?

Unmonitored traffic is traffic that has no port assigned to an app name Eg http - port 80 , but if you moved the server port to 81 if there is no assigned app to port in the list it's then classified as Unmonitored, you need to add the names and ports that are not in the list for it to start monitoring them