Quantcast
Channel: THWACK: Discussion List - NetFlow Traffic Analyzer
Viewing all 1535 articles
Browse latest View live

Netflow with NO ROUTERS

$
0
0

Hello,

 

I just joined a new company that has 7 remote MPLS sites that are all connected via Cisco 3750 Layer 3 switches and no routers in place.

 

Can I still use NETFLOW in this configuration and if so how ?

 

Thanks

Colin


Has ANYONE got Flexible Netflow working on 4500 with Sup7 that is understandable by Solarwinds Netflow

$
0
0

Hi have been trying to work with Cisco over the past 4 weeks to get Flexible Netflow to work properly with Orion/NTA with zero success. This is a 4507R+E with dual Sup 7's

I have the works TAC support person, but that's beside the point. I've spoken with SW and didn't get the warm and fuzzies on their answers either.

It appears to me I will not be able to monitor layre "virtual" interfaces on the 4507, which is unacceptable and if the case I will raise a stink with Cisco one I get it working.

So my questions are:

Does it even work? This hardware, Flexible Network and NTA 3.7?

The commands take and it just seems like NTA doesn't accept them, I'm guessing they are missing something like TOS, but this is not the same as regular Netflow.

I have been testing many permitations, but I either get the traffic in NTA showing that it is coming from all interfaces, or it doesn't see any at all.

 Here's the config I am testing with today:

flow record ipv4
! match ipv4 tos
 match ipv4 protocol
 match ipv4 source address
 match ipv4 destination address
 match transport source-port
 match transport destination-port
collect interface input
!
!
flow exporter NetFlow-to-Orion
 destination 10.10.10.1
 source vlan254
 transport udp 2055
export-protocol netflow-v5
!
!
flow monitor NetFlow-Monitor
 description Original Netflow captures
 record ipv4
 exporter NetFlow-to-Orion

vlan configuration 254
ip flow monitor NetFlow-Monitor input

 

Any help would be great

 

Bob

NTA Install

$
0
0

I have NPM, NPM additional web server, 4 pollers and NCM.  NCM is 7.1 and is installed on the same VM that I have my primary NPM server is on.   

 

I need to know if my upcoming install of NTA must be installed on the same VM which I have installed NPM or can I install it on a separate VM?  i want NTA to intregrate with my primary NPM webserver  and my additional NPM webserver just like my current install of NCM does.

 

Thanks,

 

Brad

Netflow Top Applications only showing "IPsec Nat-Traversal"

$
0
0

Hello

 

We have configured Flexible Netflow on a Cisco 871 router running version 12.4(20)T. The traffic is visible in the Orion Netflow tab, however the top conversations/applications show the following:

 

Ingress...99.43% of traffic is "IPsec Nat-Traversal", with the top conversation being between the static WAN IP address of our router and an IP address in the PTT network.

 

Egress...100% of traffic is "IPsec Nat-Traversal" between the same endpoints.

 

Any idea why we cannot see the real conversations?

 

Thanks

Amy

Netflow Interface details view

$
0
0

I went to the view for netflow interface details.  I broke the view into 2 tabs.  One for applications/hosts, the other for QoS.  Now when I go into the interface I expect to get the same feel like a node where I see the 2 tabs on the side and I can pick on or the other and go back and forth.  I can't do this.  I have to go to the flow navigator and select 1 view or the other.  Am I expecting this to work in the wrong way?

Nodes Traffic problem

$
0
0

Good morning,

 

I've recently taken over the management of the Solarwinds platform installed in this company. They've been using it for some time and they let it running after some basic configs and installs.

 

Now is my job to patch it properly and let it running in prime condition. However ive encounter some problems, for one with NTA(problems on our part im sure).

As you can see in the pic, most of the nodes addes have stopped sending data or have never sent it.

 

The config of those routers are all the same, and idk why is that they stopped sending data. If there is any pointer as to where to look up I'll appreciate it.

 

Happy monitoring,

 

Raul.

ASA 8.4(5) NetFlow Problem

$
0
0

After we upgraded our Cisco Asa firewalls to version 8.4(5), NetFlow exports from the Asa cannot be processed by Solarwinds NTA. The error is as follows:
NetFlow Receiver Service [SECUOMNF01] received an invalid V9 template with ID from device.

 

This problem started with Asa version 8.4(5), no problems in previous versions.

 

Asa flow-export configuration:

 

flow-export template timeout-rate 1

flow-export delay flow-create 30

flow-export active refresh-interval 1

netflow and CBQoS data are not available

$
0
0

i configure netflow analyser on my routers 1841 and 3845 series but when i try to see the details of one interface it's show me that " Details for interface 'fastethernet 0/0' on 'router xxxx' are note available because netflow and CBQoS data are not available"

help me to solve this problem.

Thanks.


Nexus 7000 netflow v5 issue

$
0
0

Using version 9 of netflow worked perfectly but I had to use v5 for another flow, now NTA is saying "NetFlow Receiver Service [SOLARWINDS] is receiving flow data from unmanaged interface '#103' on core and it does not support SNMP."  If I add the interface its name is NTA Virtual Interface 101 and not the VLAN expected.  What am I doing wrong?

 

flow exporter SolarWindsIPv4Flow

  destination *.*.*.* use-vrf management

  transport udp 2055

  source mgmt0

  version 5

 

flow monitor NetflowExportV5

  record netflow-original

  exporter SolarWindsIPv4Flow

 

interface Vlan256

ip flow monitor NetflowExportV5 input

Why the two numbers of Total bytes of Ingress Router A and Egress Router B are not equal???

$
0
0

Hi forum,

 

My Company has two site BachHO (**) and CTK3 (Branch). We connected two sites using an WAN. I monitored ingress and egress traffic of WAN interface of Router WAN at both sites. I suppose that in a specific of time the Total bytes of Egress of Router BachHO must be same as the number of Ingress of Router CTK3. But in reality, they are not same. I cannot find out the reason why??? Plz explain to me.

Here are some pictures

The two topmost pics are Router BachHO

The two bottommost pics are Router CTK3

1.jpg2.jpg3.jpg4.jpg

CBQoS has no information

$
0
0

Hi forum,

 

I have configured  class based shaping to my WAN interface of Router Wan. The Solarwind NTA has recognized the name of Shaping Queue and Class based Queues but no information in them. I has changed the selection to BOTH and Egress sometimes but not work. Do I miss some more configurations?

Thanks to any replies.

5.jpg6.jpg

smnp or nprobe on netflow traffic analyzer

$
0
0

hi guys, first of all i got to say sorry for my bad english.

 

the thing is that i have 1 server whit solarwinds, and i need to control the network trafic.

 

i got 1 server whit solarwinds and 5 computers with win 7, all conected to a 3com baseline 2016 switch.

i configured snmp on win 7 computers and im able to see the cpu, disk and memory usage, etc. also i can see the interfaces on netflow when i manage sources. But no traffic is show on any of this computers.

 

it display the next message:

Details for interface 'xxxxxxxxxxxx' are not available because NetFlow and CBQoS data are not available.

whats my problem???

 

i need to use nprobe???

how i configure it?

 

thaks guys and again sorry for my english

Polling a machine that does not broadcast

$
0
0

Hi Guys,

 

We currently have a machine or panel that has an IP address and is not pingable due to the way that it has been setup on the network. Because of this it is always showing to be down in Solarwinds. We have Solarwinds NPM Version 10.3.1 and NTA 3.10.0.

 

It is also not possible to install or enable SNMP on this device either(from what I've been told). Am I just SOL? or is there a way around this?

 

Thanks,

Shane

Netflow reports Error: NetFlowService inaccessible after server move

$
0
0

Hi

We recently did a server move of Orion NPM and NTA (database and website on same server)

After the move Netflow is now reporting "Error: NetFlowService inaccessible. Verify that service is 'Started'." but everything seems to be working fine and netflow data is coming in to Orion as expected.

Last Traffic Analyzer Events shows this:

NetFlow Receiver Service [OSYS-SC2] started - listening on port(s) [2055]

So this is not a critical error, i would just like to know if i somehow can get rid of the error message as everything appears to be working fine.

What's this?

$
0
0

Hey guys, I have run into a little problem here shown in the attachment.

Tried unistalling and re-install it again but to no avail.. I'm puzzled by this error shown. Help please
Thanks in advance!


Trending traffic between IP address groups

$
0
0

I'm looking to find out how I could use NTA to trend traffic between different IP address groups. Ideally, I'd like to have a graph that represents traffic between two IP address groups over a specific period of time. Therefore, I could create a view with these graphs between various IP address groups. Is this at all feasible?

Any method to change the colors in pie charts for NTA?

$
0
0

Did a bit of searching but couldn't find this specific question asked.

 

Is there any method for having different colors display on the TopXX pie charts in NTA? Code/hmtl changes, etc....

Example of stock colors attached. The brown and gray are a little....muted.

Thanks!

Unmanaged Interfaces

$
0
0

     Hello!

 

I am seeing a lot of the Netflow Data Received from Unmanaged Interface events on the NPM Web Console.

 

I have a doubt regarding this, is it possible to limit/block/cancel the output of the Netflow from a certain Interface? Do I have to do some configs on my switch/router?

 

Regards,

--Raul

Enable sFlow on HP Procurve 4208vl switch

$
0
0

We are implementing Solarwinds NTA and I'm trying to get sFlow working on our HP Procurve 4208vl switch.

 

 

I was able to enable sFlow by entering the following commands:

 

 

setmib sFlowRcvrAddress.1 -o 0A00020C  (10.0.2.12)

setmib sFlowRcvrOwner.1 -D sFlowowner sFlowRcvrTimeout.1 -i 100000000

setmib sFlowRcvrPort.1 -i 2055

 

 

After entering "walkmib ifName" to get the PVID mappings - I entered these command to configure port C2:

 

 

setmib sFlowFsReceiver.11.1.3.6.1.2.1.2.2.1.1.54.1 -i 1

setmib sFlowFsPacketSamplingRate.11.1.3.6.1.2.1.2.2.1.1.54.1 -i 512

setmib sFlowFsMaximumHeaderSize.11.1.3.6.1.2.1.2.2.1.1.54.1 -i 128

setmib sFlowCpReceiver.11.1.3.6.1.2.1.2.2.1.1.54.1 -i 1

setmib sFlowCpInterval.11.1.3.6.1.2.1.2.2.1.1.54.1 -i 30

 

 

After any of these commands, the following message is returned:

 

 

sFlowFsReceiver.11.1.3.6.1.2.1.2.2.1.1.54.1: Unable to create.

 

 

Can someone help me to get this working?

 

 

Thanks in advance,

 

Steve

 

 

 

Useful Information:

Software revision  : L.10.23 

ROM Version        : L.10.03

 

 

OURSWITCH# walkmib 1.3.6.1.4.1.14706

sFlowVersion.0 = 1.3;HP;L.10.23

sFlowAgentAddressType.0 = 1

sFlowAgentAddress.0 = 0a 00  02 11

sFlowRcvrOwner.1 = sFlowowner

sFlowRcvrTimeout.1 = 99,946,298

sFlowRcvrMaximumDatagramSize.1 = 1400

sFlowRcvrAddressType.1 = 1

sFlowRcvrAddress.1 = 0a 00  02 0c

sFlowRcvrPort.1 = 2055

sFlowRcvrDatagramVersion.1 = 5

 

 

 

 

Websites I used for info:

http://m1xed0s.blogspot.com/2012_12_01_archive.html

http://thwack.solarwinds.com/thread/53070vl S

NTA 3.10.0 CBQOS Percentage question.

$
0
0

Question,

 

If you look at the attached file, at the very bottom on the far left.  It shows the average for COS1_RTP s 0.12%.  My question is, is that 0.12% of the total bandwidth for this interface or of the policy map percentages that are set?

 

Thanks!

Viewing all 1535 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>