For more information on NTA, visit: http://www.solarwinds.com/products/network-traffic-analyzer/info.aspx This video tutorial covers NetFlow best practices for planning and deployment and is Part 2 of the NetFlow training series.

2. Introduction
 A big “Howdy” from SolarWinds
based in Austin, Texas
» Josh Stephens - Head Geek, Monster Blogger,
Constant Tweeter
» Nikki Jennings – SE Manager
» Jason Matthews – SolarWinds Lab Manager
 Today’s Topic: Part #2 - Training on the
Orion NetFlow Traffic Analyzer
 Who is SolarWinds?
» Dude, if you don’t’ know this
you’re on the wrong webcast…

3. Housekeeping
 Can you hear me now?
 If not, use the GoToWebinar chat or Q&A
panel to let us know.
 How do you win the free stuff?
 How do you ask questions?
 Will this thing be recorded?
 Ask lots of questions – Today’s
content is based on the feedback
from part #1

4. Agenda
 Refresher – NetFlow Basics from Part #1
 Configuring Flow Export on Network Devices
 Understanding Orion NTA Events
 Troubleshooting Flow Reception
 Where to Learn More and Q&A

5. Basics of Traffic Flow Technologies
 Keeps track of the traffic flowing from place to place
 Traditionally leveraged on to monitor layer 3 (routed)
traffic flows
 Recent addition of layer 2 (switched) traffic detail

6. What is a “Flow”
 A flow is identified by NetFlow v5 Key Fields
combining a set of key Source IP Address
Destination IP Address
fields from the network Source Port Number
packets Destination Port Number
Layer 3 Protocol Type
ToS byte
 A flow has a set of Logical Interface Index
statistical data NetFlow v5 Flow Statistics
System uptime start of flow
System uptime end of flow
# of packets in flow
# of bytes in flow

7. Shared Technical Details
 Transport Protocol is UDP
» Some newer versions optionally support TCP and SCTP
» UDP Port numbers are generally configurable
 Technology included within router/switch software
» Check your IOS feature set if using Cisco gear
» Some implementations in software, some on ASIC
 Easy to configure/enable on network gear
» Usually only a few CLI commands
» Some devices configurable via SNMP and/or web services interface

8. Agenda
 Refresher – NetFlow Basics from Part #1
 Configuring Flow Export on Network Devices
 Understanding Orion NTA Events
 Troubleshooting Flow Reception
 Where to Learn More and Q&A
 Q&A

9. Configuring Devices for Flow Export
 NetFlow
» Cisco 2951 (ISR G2)
» Cisco ASA 5505
» Adtran NetVanta 3448
 sFlow
» HP Procurve 5406
» Foundry Fast Iron 4802
» Extreme Alpine 3808
 JFlow
» Juniper J2300

10. Agenda
 Refresher – NetFlow Basics from Part #1
 Configuring Flow Export on Network Devices
 Understanding Orion NTA Events
 Troubleshooting Flow Reception
 Where to Learn More and Q&A
 Q&A

11. Understanding Orion NTA Events

12. Understanding Orion NTA Events

13. Understanding Orion NTA Events

14. Agenda
 Refresher – NetFlow Basics from Part #1
 Configuring Flow Export on Network Devices
 Understanding Orion NTA Events
 Troubleshooting Flow Reception
 Where to Learn More and Q&A
 Q&A

15. Troubleshooting Flow Reception

16. Troubleshooting Flow Reception

17. Troubleshooting Flow Reception

18. Agenda
 Refresher – NetFlow Basics from Part #1
 Configuring Flow Export on Network Devices
 Understanding Orion NTA Events
 Troubleshooting Flow Reception
 Where to Learn More and Q&A
 Q&A

19. Where to get learn more…
 Documentation
» New to Networking Volume III – NetFlow Basics and Deployment
Strategies
• http://thwack.com/media/p/83695.aspx
» Guide to Enabling NetFlow on Cisco Catalyst Switches
• http://www.solarwinds.com/support/Netflow/docs/OrionNetFlowSwitches.pdf
» Orion NTA Administrator’s Guide
• http://www.solarwinds.com/support/NetFlow/docs/NetFlowAdministratorGui
de.pdf
 Videos
• http://www.solarwinds.com/geek
 Community
• http://www.thwack.com
 Technical Support
• http://www.solarwinds.com/support/

20. Summary and Q&A
Thank you for attending!
To learn more or to download free 30-day trials of
SolarWinds products visit: www.SolarWinds.com
Contact information
Josh Stephens, Head Geek
headgeek@solarwinds.com
twitter: sw_headgeek
Blog: http://thwack.com/blogs/geekspeak/
p.s. Remember to renew your maintenance!!!