Questions:
1. Was it working before?
If no: Then most likely the configuration or routing issue. To verify if it is something to do with NTA or device, run wireshark on the Orion server and filter it to the IP address for that node, check if your getting any flow data.
If yes: are there any device configuration changes, or access list policy update (in case it is behind a firewall)? same thing, run wireshark to isolate the issue.
2. Do you have other node/interfaces shows netflow data
if yes: then most likely it is some thing on the device configuration or access list.
If no: then there is a chance that it is something on NTA.
- RDP to your Orion server and stop the netflow service (Orion service manager)
- RDP to your NTA FSDB and launch NTA flow configurator and test the connection to your SQL by hitting the test and hit ok to restart the service.
- Once the NTA FSDB is complete, start the netflow service on the Orion server.
3. What is your NTA version, if you are NTA 3.11 and below, step 2 on the No part will not work for you. If you are 4.0 and above, that will work.
*** if you are on 4.0, 4.0.1 or 4.0.3, I suggest you can upgrade your NTA to 4.1 but make sure your NPM is on 11.0.1
