If your devices export flows to the SolarWinds NTA receiver, but are not managed in SolarWinds NPM, or are not configured for monitoring in SolarWinds NTA, SolarWinds NTA cannot process the exported information. SolarWinds NTA informs you that it is receiving unknown traffic by displaying a message in the yellow information banner at the top of your SolarWinds NTA views.
Unknown traffic can include traffic from unmanaged devices and unmonitored or unmanageable interfaces. The following sections introduce different unknown traffic types:
Traffic from unmanaged nodes or interfaces
Unmanaged objects are nodes or interfaces that are not managed in SolarWinds NPM. The devices export flows, but SolarWinds NTA cannot access the necessary data stored in the Orion SQL Database. You need to add these nodes and interfaces to SolarWinds NPM first. For more information, see Add flow-enabled devices and interfaces to the Orion database.
Traffic from unmonitored interfaces
Unmonitored interfaces are interfaces managed in SolarWinds NPM, but not monitored by SolarWinds NTA. Traffic data from them are collected, but you cannot see them in SolarWinds NTA until you enable monitoring for them. For more information about monitoring flow and CBQoS sources in SolarWinds NTA, see NetFlow sources and CBQoS polling.
Traffic from unmonitored interfaces appears in SolarWinds NTA mainly if flow sources are not being added to SolarWinds NTA automatically. For more details, see Enable the automatic addition of flow sources.
Traffic from unmanageable interfaces
Unmanageable interfaces cannot be monitored using SNMP. However, SolarWinds NTA can receive traffic from these interfaces. SolarWinds NPM does not poll data for these nodes via SNMP, the nodes are only registered there and flows can be processed by SolarWinds NTA. However, to monitor this data in SolarWinds NTA, you must add the interface for monitoring to SolarWinds NTA, and provide the interface speed. For more information, see Enable flow monitoring from unmanageable interfaces.
If you cannot see an unknown traffic event concerning a device which should be exporting NetFlow, log on to the device and check the configuration. Make sure the device sends data to the appropriate port, which is 2055 by default.
If you cannot see the banner, click NetFlow Settings, and then click Show Unknown Traffic Events under NetFlow Management.