Submit a ticketCall us

Solarwinds & Cisco Live! Barcelona
Join us from the 29th of January to the 2nd of February at Cisco Live 2018 in Barcelona, where we will continue to show how monitoring the network with SolarWinds will keep you ahead of the game. At our booth (WEP 1A), we will demonstrate how SolarWinds network solutions can help. As a bonus, we are also hosting a pre-event webinar - Blame the Network, Hybrid IT Edition with our SolarWinds Head Geek™, Patrick Hubbard on January 24th - GMT (UTC+0): 10:00 a.m. to 11:00 a.m. There's still time to RSVP.

Home > Success Center > Netflow Traffic Analyzer (NTA) > NetFlow data not available

NetFlow data not available

Overview

Assuming you have setup your device to export NetFlow to the Orion server, and you have verified with a packet capture tool that the flow packets are being sent from the device and arriving at the Orion server. The most likely cause of Orion NTA failure to process flow packets is that the packets are not being written into the Orion database due to a firewall block.

Packet capture tools (for example, WireShark), operate on a lower level in the IP stack; so though the capture shows the packets successfully sent and received, the firewall can subsequently block their processing at the application layer, before Orion NTA can work on them.

Environment

Orion NTA 3.6 or higher

Resolution

If you are running a firewall on the Orion server, do the following:

  1. Disable firewall on the Orion NTA server.
  2. View the Orion NTA event log for a notification that Orion NTA is receiving flows from an unmonitored interface.
  3. Click the link in the event log notification to add the device to NetFlow sources; alternatively, you can manually add the device through the NetFlow Sources resource.
  4. Enable the firewall and create rule to permit flows from the relevant interface.
Last modified

Tags

Classifications

Public