Network Management

NTA reports a higher bandwidth utilization than the threshold value

NTA reports a higher bandwidth utilization than the threshold for the interface. Also, the reported bandwidth utilization is higher than that of NPM. For example, 100Mbps interface reporting spikes of up to 1Gbps in NTA.

First published date

10/20/2018 7:01 PM

Last published date

7/22/2026 10:25 PM

Overview

NTA reports a higher bandwidth utilization than the threshold for the interface. Also, the reported bandwidth utilization is higher than that of NPM. For example, 100Mbps interface reporting spikes of up to 1Gbps in NTA.

Product section

Netflow Traffic Analyzer

Cause

This is caused by a misconfigured device (router) that exports the NetFlow data summaries for long recorded conversations instead of sending those exports evenly over time.

Resolution

  • If you are using standard NetFlow v9, add the following command to your Cisco router:

ip flow-cache timeout active 1

  • If you are using Cisco v5, add the following commands to your Cisco router:

ip flow-cache timeout active 1

ip flow-cache timeout inactive 15

  • If you are using Cisco Flexible Netflow, which is based on Netflow v9 add the commands below to the "Flow Monitor"

           





  • If you are using a Cisco ASA running IOS 9.1.2 or higher this command should be available to correct this:

flow-export active refresh-interval 1
 

  • Other ASA settings to validate:

ip flow-export delay flow-create 60 

ip flow-export template timeout-rate 1