How is Orion NetFlow Traffic Analyzer licensed?
You must purchase the Orion NetFlow Traffic Analyzer license that coordinates with your underlying Orion Network Performance Monitor (NPM) license. For instance, if you own Orion NPM SLX, then you would purchase the NetFlow Traffic Analyzer for Orion NPM SLX license.
Calculate your Orion NPM license
hereOrion NPM is licensed by the largest number of the three following element types:
- Interfaces: interfaces include switch ports, physical interfaces, virtual interfaces, sub-interfaces, VLANs, and any other single point of network traffic.
- Nodes: nodes include entire devices, for example, routers, switches, servers, access points, and modems.
- Volumes: volumes are equal to the logical drives you monitor.
The following list provides the different types of Orion licenses available:
- Up to 100 objects (SL100)
- Up to 250 objects (SL250)
- Up to 500 objects (SL500)
- Up to 2000 objects (SL2000)
- Unlimited objects (SLX)
Which versions of NetFlow does Orion NetFlow Traffic Analyzer support?
Orion NetFlow Traffic Analyzer can collect data from all devices that support NetFlow v5, NetFlow v9, sFlow, or J-Flow. NetFlow v9 devices are supported using NetFlow v5 data formats.
Can Orion NTA analyze NetFlow from Cisco ASA devices?
Yes, Orion NTA supports all Cisco Adaptive Security Appliance (ASA) models.
How does Orion NetFlow Traffic Analyzer work?
Flow-enabled devices, such as routers and switches produced by Cisco Systems®, HP®, Foundry Networks®, Juniper Networks®, Nortel Networks®, and other leading vendors, provide a wealth of IP-related traffic information. NetFlow Traffic Analyzer collects this NetFlow, J-Flow, sFlow, and IPFIX data and correlates it into a useable format.
Presenting the data side-by-side with detailed network performance data collected by Orion NPM, NetFlow Traffic Analyzer delivers easily read graphs and reports on bandwidth use in and to your network. These reports help you monitor bandwidth, track conversations between internal and external endpoints, analyze traffic, and plan bandwidth capacity needs.
Which port is the default SolarWinds Orion NetFlow port?
NetFlow Traffic Analyzer collects all flow traffic on port 2055 by default. This port can be modified under NetFlow Collector Settings within the NetFlow Settings section.
Which fields within the NetFlow packet are captured by Orion NetFlow Traffic Analyzer?
NetFlow Traffic Analyzer collects and stores the following fields within the NetFlow packets: source IP address, destination IP address, SNMP index of input interface, SNMP index of output interface, packets in the flow, total number of Layer 3 bytes in the packets of the flow, SysUptime at start of flow, source port number, destination port number, IP protocol type, IP type of service (ToS), and class-based quality of service (CBQoS).
Can Orion NTA analyze network traffic from devices that do not support flow-based traffic analysis protocols (e.g., NetFlow, sFlow, J-Flow)?
Yes, many customers use nProbe together with Orion NTA to analyze network traffic without flow-capable network equipment. Check out our blog post
which details how to enable analysis using nProbe.