Network Management

NTA application traffic for Cisco ASR/ISR devices shows as "Unrecognized" after upgrading to SolarWinds Platform 2024.1 and above

After upgrading to SolarWinds Platform 2024.1 and above, NTA application traffic for Cisco ASR/ISR devices shows as unrecognized. Prior to 2024.1 and below, this issue did not occur.

First published date

2/13/2024 10:39 AM

Last published date

7/9/2025 5:50 PM

Overview

After upgrading to SolarWinds Platform 2024.1, NTA application traffic for Cisco ASR/ISR devices under Top 10 Applications shows as "Unrecognized"

nta_1.png
 

Product section

Netflow Traffic Analyzer

Cause

This issue is occurring due to a software bug with the Cisco ASR/ISR series.

When Devices Cisco ASR/ISR series device exports flow templates + data (flow data) with observation id = 256 but options templated + data (NBAR2 labels) with observation ID = 6 that is different.

Before version 2024.1, the default option to match templates and data was to ignore the observation ID
The Observation ID/SourceID should be the same.

Resolution

To workaround this problem, perform the following steps:

the setting "PacketParserSettingsIsSourceIdMatchRequired" was changed to True
We can change back to false by going to advanced settings
  1. Login to SolarWinds Platform web console
  2. Navigate to https://<Orion_URL>/orion/Admin/AdvancedConfiguration/Global.aspx
  3. Under advanced configuration change setting for NetFlow.Processing, search for PacketParserSettingsIsSourceIdMatchRequired
  4. Uncheck the setting (FALSE)
NTA_2.png