Submit a ticketCall us

Looking to compare latest NPM features with previous versions of NPM?
The NPM new feature summary offers a comparison of new features and improvements offered with this release.

 

Home > Success Center > Netflow Traffic Analyzer (NTA) > NetFlow data not available

NetFlow data not available

Overview

Assuming you have setup your device to export NetFlow to the Orion server, and you have verified with a packet capture tool that the flow packets are being sent from the device and arriving at the Orion server. The most likely cause of Orion NTA failure to process flow packets is that the packets are not being written into the Orion database due to a firewall block.

Packet capture tools (for example, WireShark), operate on a lower level in the IP stack; so though the capture shows the packets successfully sent and received, the firewall can subsequently block their processing at the application layer, before Orion NTA can work on them.

Environment

Orion NTA 3.6 or higher

Resolution

If you are running a firewall on the Orion server, do the following:

  1. Disable firewall on the Orion NTA server.
  2. View the Orion NTA event log for a notification that Orion NTA is receiving flows from an unmonitored interface.
  3. Click the link in the event log notification to add the device to NetFlow sources; alternatively, you can manually add the device through the NetFlow Sources resource.
  4. Enable the firewall and create rule to permit flows from the relevant interface.
Last modified
03:01, 10 Apr 2017

Tags

Classifications

Public