2 Replies Latest reply on Feb 5, 2010 10:46 AM by kmorrison

    Some traffic not displaying

      I've gotten RTNA running fine and am collecting most of the data we need to see, it's a great tool.

      We have about 60 users on our LAN but I consistently only see conversations from about 25 of the same internal IP addresses.  I KNOW most of the other users are moving packets but they never seem to show up in the monitor.  There are several users whose IP I look for repeatedly but they never register.  Any ideas why?

        • Re: Some traffic not displaying

          There are a few things that could be causing this:

          1. Could those users be moving packets only within the LAN?  If the traffic isn't routed across the device, it generally won't show up in the NetFlow packets exported from the router.
          2. It's possible that they are falling off the reports because they don't fall within the Top <X> selected at the top of the app.  Even if you have it maxed out at Top 50, the 10 or so users representing the least traffic volume could be falling off the lists.
          3. It's possible that you might be monitoring the wrong interface; if you've got more than one LAN interface, you want to make sure to group them into an L3 VLAN and capture NetFlow from that VLAN interface.

          Hope this helps.

            • Re: Some traffic not displaying

              Thanks for the response.  I track by top 50, it's entirely possible these users are falling short of that range.  They reside in the same VLAN as the rest of us and are certainly moving packets that should be picked up.  With everything else functioning properly, I guess they just aren't active enough to be seen.