Hello,
I just joined a new company that has 7 remote MPLS sites that are all connected via Cisco 3750 Layer 3 switches and no routers in place.
Can I still use NETFLOW in this configuration and if so how ?
Thanks
Colin
Hello,
I just joined a new company that has 7 remote MPLS sites that are all connected via Cisco 3750 Layer 3 switches and no routers in place.
Can I still use NETFLOW in this configuration and if so how ?
Thanks
Colin
Hi have been trying to work with Cisco over the past 4 weeks to get Flexible Netflow to work properly with Orion/NTA with zero success. This is a 4507R+E with dual Sup 7's
I have the works TAC support person, but that's beside the point. I've spoken with SW and didn't get the warm and fuzzies on their answers either.
It appears to me I will not be able to monitor layre "virtual" interfaces on the 4507, which is unacceptable and if the case I will raise a stink with Cisco one I get it working.
So my questions are:
Does it even work? This hardware, Flexible Network and NTA 3.7?
The commands take and it just seems like NTA doesn't accept them, I'm guessing they are missing something like TOS, but this is not the same as regular Netflow.
I have been testing many permitations, but I either get the traffic in NTA showing that it is coming from all interfaces, or it doesn't see any at all.
Here's the config I am testing with today:
flow record ipv4
! match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
collect interface input
!
!
flow exporter NetFlow-to-Orion
destination 10.10.10.1
source vlan254
transport udp 2055
export-protocol netflow-v5
!
!
flow monitor NetFlow-Monitor
description Original Netflow captures
record ipv4
exporter NetFlow-to-Orion
vlan configuration 254
ip flow monitor NetFlow-Monitor input
Any help would be great
Bob
I have NPM, NPM additional web server, 4 pollers and NCM. NCM is 7.1 and is installed on the same VM that I have my primary NPM server is on.
I need to know if my upcoming install of NTA must be installed on the same VM which I have installed NPM or can I install it on a separate VM? i want NTA to intregrate with my primary NPM webserver and my additional NPM webserver just like my current install of NCM does.
Thanks,
Brad
Hello
We have configured Flexible Netflow on a Cisco 871 router running version 12.4(20)T. The traffic is visible in the Orion Netflow tab, however the top conversations/applications show the following:
Ingress...99.43% of traffic is "IPsec Nat-Traversal", with the top conversation being between the static WAN IP address of our router and an IP address in the PTT network.
Egress...100% of traffic is "IPsec Nat-Traversal" between the same endpoints.
Any idea why we cannot see the real conversations?
Thanks
Amy
I went to the view for netflow interface details. I broke the view into 2 tabs. One for applications/hosts, the other for QoS. Now when I go into the interface I expect to get the same feel like a node where I see the 2 tabs on the side and I can pick on or the other and go back and forth. I can't do this. I have to go to the flow navigator and select 1 view or the other. Am I expecting this to work in the wrong way?
Good morning,
I've recently taken over the management of the Solarwinds platform installed in this company. They've been using it for some time and they let it running after some basic configs and installs.
Now is my job to patch it properly and let it running in prime condition. However ive encounter some problems, for one with NTA(problems on our part im sure).
As you can see in the pic, most of the nodes addes have stopped sending data or have never sent it.
The config of those routers are all the same, and idk why is that they stopped sending data. If there is any pointer as to where to look up I'll appreciate it.
Happy monitoring,
Raul.
After we upgraded our Cisco Asa firewalls to version 8.4(5), NetFlow exports from the Asa cannot be processed by Solarwinds NTA. The error is as follows:
NetFlow Receiver Service [SECUOMNF01] received an invalid V9 template with ID from device.
This problem started with Asa version 8.4(5), no problems in previous versions.
Asa flow-export configuration:
flow-export template timeout-rate 1
flow-export delay flow-create 30
flow-export active refresh-interval 1
i configure netflow analyser on my routers 1841 and 3845 series but when i try to see the details of one interface it's show me that " Details for interface 'fastethernet 0/0' on 'router xxxx' are note available because netflow and CBQoS data are not available"
help me to solve this problem.
Thanks.
Using version 9 of netflow worked perfectly but I had to use v5 for another flow, now NTA is saying "NetFlow Receiver Service [SOLARWINDS] is receiving flow data from unmanaged interface '#103' on core and it does not support SNMP." If I add the interface its name is NTA Virtual Interface 101 and not the VLAN expected. What am I doing wrong?
flow exporter SolarWindsIPv4Flow
destination *.*.*.* use-vrf management
transport udp 2055
source mgmt0
version 5
flow monitor NetflowExportV5
record netflow-original
exporter SolarWindsIPv4Flow
interface Vlan256
ip flow monitor NetflowExportV5 input
Hi forum,
My Company has two site BachHO (**) and CTK3 (Branch). We connected two sites using an WAN. I monitored ingress and egress traffic of WAN interface of Router WAN at both sites. I suppose that in a specific of time the Total bytes of Egress of Router BachHO must be same as the number of Ingress of Router CTK3. But in reality, they are not same. I cannot find out the reason why??? Plz explain to me.
Here are some pictures
The two topmost pics are Router BachHO
The two bottommost pics are Router CTK3
Hi forum,
I have configured class based shaping to my WAN interface of Router Wan. The Solarwind NTA has recognized the name of Shaping Queue and Class based Queues but no information in them. I has changed the selection to BOTH and Egress sometimes but not work. Do I miss some more configurations?
Thanks to any replies.
hi guys, first of all i got to say sorry for my bad english.
the thing is that i have 1 server whit solarwinds, and i need to control the network trafic.
i got 1 server whit solarwinds and 5 computers with win 7, all conected to a 3com baseline 2016 switch.
i configured snmp on win 7 computers and im able to see the cpu, disk and memory usage, etc. also i can see the interfaces on netflow when i manage sources. But no traffic is show on any of this computers.
it display the next message:
Details for interface 'xxxxxxxxxxxx' are not available because NetFlow and CBQoS data are not available.
whats my problem???
i need to use nprobe???
how i configure it?
thaks guys and again sorry for my english
Hi Guys,
We currently have a machine or panel that has an IP address and is not pingable due to the way that it has been setup on the network. Because of this it is always showing to be down in Solarwinds. We have Solarwinds NPM Version 10.3.1 and NTA 3.10.0.
It is also not possible to install or enable SNMP on this device either(from what I've been told). Am I just SOL? or is there a way around this?
Thanks,
Shane
Hi
We recently did a server move of Orion NPM and NTA (database and website on same server)
After the move Netflow is now reporting "Error: NetFlowService inaccessible. Verify that service is 'Started'." but everything seems to be working fine and netflow data is coming in to Orion as expected.
Last Traffic Analyzer Events shows this:
NetFlow Receiver Service [OSYS-SC2] started - listening on port(s) [2055]
So this is not a critical error, i would just like to know if i somehow can get rid of the error message as everything appears to be working fine.
Hey guys, I have run into a little problem here shown in the attachment.
Tried unistalling and re-install it again but to no avail.. I'm puzzled by this error shown. Help please
Thanks in advance!
I'm looking to find out how I could use NTA to trend traffic between different IP address groups. Ideally, I'd like to have a graph that represents traffic between two IP address groups over a specific period of time. Therefore, I could create a view with these graphs between various IP address groups. Is this at all feasible?
Did a bit of searching but couldn't find this specific question asked.
Is there any method for having different colors display on the TopXX pie charts in NTA? Code/hmtl changes, etc....
Example of stock colors attached. The brown and gray are a little....muted.
Thanks!
Hello!
I am seeing a lot of the Netflow Data Received from Unmanaged Interface events on the NPM Web Console.
I have a doubt regarding this, is it possible to limit/block/cancel the output of the Netflow from a certain Interface? Do I have to do some configs on my switch/router?
Regards,
--Raul
We are implementing Solarwinds NTA and I'm trying to get sFlow working on our HP Procurve 4208vl switch.
I was able to enable sFlow by entering the following commands:
setmib sFlowRcvrAddress.1 -o 0A00020C (10.0.2.12)
setmib sFlowRcvrOwner.1 -D sFlowowner sFlowRcvrTimeout.1 -i 100000000
setmib sFlowRcvrPort.1 -i 2055
After entering "walkmib ifName" to get the PVID mappings - I entered these command to configure port C2:
setmib sFlowFsReceiver.11.1.3.6.1.2.1.2.2.1.1.54.1 -i 1
setmib sFlowFsPacketSamplingRate.11.1.3.6.1.2.1.2.2.1.1.54.1 -i 512
setmib sFlowFsMaximumHeaderSize.11.1.3.6.1.2.1.2.2.1.1.54.1 -i 128
setmib sFlowCpReceiver.11.1.3.6.1.2.1.2.2.1.1.54.1 -i 1
setmib sFlowCpInterval.11.1.3.6.1.2.1.2.2.1.1.54.1 -i 30
After any of these commands, the following message is returned:
sFlowFsReceiver.11.1.3.6.1.2.1.2.2.1.1.54.1: Unable to create.
Can someone help me to get this working?
Thanks in advance,
Steve
Useful Information:
Software revision : L.10.23
ROM Version : L.10.03
OURSWITCH# walkmib 1.3.6.1.4.1.14706
sFlowVersion.0 = 1.3;HP;L.10.23
sFlowAgentAddressType.0 = 1
sFlowAgentAddress.0 = 0a 00 02 11
sFlowRcvrOwner.1 = sFlowowner
sFlowRcvrTimeout.1 = 99,946,298
sFlowRcvrMaximumDatagramSize.1 = 1400
sFlowRcvrAddressType.1 = 1
sFlowRcvrAddress.1 = 0a 00 02 0c
sFlowRcvrPort.1 = 2055
sFlowRcvrDatagramVersion.1 = 5
Websites I used for info:
Question,
If you look at the attached file, at the very bottom on the far left. It shows the average for COS1_RTP s 0.12%. My question is, is that 0.12% of the total bandwidth for this interface or of the policy map percentages that are set?
Thanks!