Submit a ticketCall us

WebinarFREE IT Monitoring Webcast

Don’t miss out on our webcast, Essential IT Monitoring with SolarWinds ipMonitor, where we will show you how to keep an eye on your IT environment from one centralized, affordable, and lightweight monitoring tool: SolarWinds® ipMonitor®.

Register now.

Home > Success Center > Netflow Traffic Analyzer (NTA) > NTA - Knowledgebase Articles > NetFlow data not available

NetFlow data not available

Updated Apr 10, 2017

 

Overview

Assuming you have setup your device to export NetFlow to the Orion server, and you have verified with a packet capture tool that the flow packets are being sent from the device and arriving at the Orion server. The most likely cause of Orion NTA failure to process flow packets is that the packets are not being written into the Orion database due to a firewall block.

Packet capture tools (for example, WireShark), operate on a lower level in the IP stack; so though the capture shows the packets successfully sent and received, the firewall can subsequently block their processing at the application layer, before Orion NTA can work on them.

Environment

Orion NTA 3.6 or higher

Resolution

If you are running a firewall on the Orion server, do the following:

  1. Disable firewall on the Orion NTA server.
  2. View the Orion NTA event log for a notification that Orion NTA is receiving flows from an unmonitored interface.
  3. Click the link in the event log notification to add the device to NetFlow sources; alternatively, you can manually add the device through the NetFlow Sources resource.
  4. Enable the firewall and create rule to permit flows from the relevant interface.
Last modified

Tags

Classifications

Public