Search 97,742 posts and 786 resources contributed by 57,092 members or post a topic.

Already Joined? Sign in
Some traffic not displaying

Page 1 of 1 (3 items) | RSS

rated by 0 users
Answered (Verified) This post has 1 verified answer | 2 Replies | 2 Followers | 246 Views


7 Posts
Points 17
kmorrison replied on Fri, Feb 5 2010 9:20 AM
rated by 0 users

I've gotten RTNA running fine and am collecting most of the data we need to see, it's a great tool.

We have about 60 users on our LAN but I consistently only see conversations from about 25 of the same internal IP addresses.  I KNOW most of the other users are moving packets but they never seem to show up in the monitor.  There are several users whose IP I look for repeatedly but they never register.  Any ideas why?

Answered (Verified) Verified Answer


279 Posts
Points 1,326
SolarWinds Employee
Answered (Verified) floyd.may replied on Fri, Feb 5 2010 9:45 AM
rated by 0 users
Verified by MarieB

There are a few things that could be causing this:

  1. Could those users be moving packets only within the LAN?  If the traffic isn't routed across the device, it generally won't show up in the NetFlow packets exported from the router.
  2. It's possible that they are falling off the reports because they don't fall within the Top <X> selected at the top of the app.  Even if you have it maxed out at Top 50, the 10 or so users representing the least traffic volume could be falling off the lists.
  3. It's possible that you might be monitoring the wrong interface; if you've got more than one LAN interface, you want to make sure to group them into an L3 VLAN and capture NetFlow from that VLAN interface.

Hope this helps.

Floyd May
Toolset Software Engineer
SolarWinds

  • | Post Points: 23

All Replies


279 Posts
Points 1,326
SolarWinds Employee
Answered (Verified) floyd.may replied on Fri, Feb 5 2010 9:45 AM
rated by 0 users
Verified by MarieB

There are a few things that could be causing this:

  1. Could those users be moving packets only within the LAN?  If the traffic isn't routed across the device, it generally won't show up in the NetFlow packets exported from the router.
  2. It's possible that they are falling off the reports because they don't fall within the Top <X> selected at the top of the app.  Even if you have it maxed out at Top 50, the 10 or so users representing the least traffic volume could be falling off the lists.
  3. It's possible that you might be monitoring the wrong interface; if you've got more than one LAN interface, you want to make sure to group them into an L3 VLAN and capture NetFlow from that VLAN interface.

Hope this helps.

Floyd May
Toolset Software Engineer
SolarWinds

  • | Post Points: 23

7 Posts
Points 17
kmorrison replied on Fri, Feb 5 2010 10:46 AM
rated by 0 users

Thanks for the response.  I track by top 50, it's entirely possible these users are falling short of that range.  They reside in the same VLAN as the rest of us and are certainly moving packets that should be picked up.  With everything else functioning properly, I guess they just aren't active enough to be seen.

  • | Post Points: 1
Page 1 of 1 (3 items) | RSS

© 2003 - 2010 SolarWinds, Inc. All Rights Reserved.

Who is SolarWinds?

SolarWinds is rewriting the rules for how companies manage their networks. Guided by a global community of network engineers, SolarWinds develops simple and powerful network management software and network monitoring software for networks of all sizes. SolarWinds also offers a network certification program to become a SolarWinds Certified Professional (SCP).

What is thwack?

thwack, SolarWinds online community site, was designed by network engineers, for network engineers. thwack is a vibrant, growing community of more than 30,000 IT pros who share a passion for technology.

Explore Resources, Answers, Templates, and Advice

Download Free Networking Tools

Learn More About SolarWinds Products