The NTA Sources Library (SETTINGS > Network Traffic Analysis > NTA Sources) enables you to view and manage NTA sources.

Tip: If you are using WhatsUp Gold and Network Traffic Analysis for the first time, it is important to understand that if you have NetFlow sources already active on your network these sources will display in the NTA Sources Library table automatically.

The total rate of flows per second that have been received by NTA, is presented at the top of the NTA Sources Library dialog. This value is the best measurement by which you can determine system load. Note that NTA has been tested using flow rates up to 20,000 fps. Additionally, for your reference, current and maximum license usage values are shown here, as well.

  • Add NBAR/QoS Source. Add endpoints for gathering NBAR and/or CBQoS statistics.
  • Add Aggregated Source. Organize interfaces into aggregate groups.
  • Edit. Modify the selected NTA source, flow source, or aggregated interface.
  • Delete. Remove the NTA source, flow source, or aggregated interface.
  • Source Traffic. Access NTA results data and dashboard views.
  • Enable. Turn on flow collection and polling for the source.
  • Disable. Turn off flow collection and polling for the source.
  • Refresh. Update the source library with the most current information.
  • Search/Filter. Enter criteria to search for and filter by source name, protocol, credentials, or IP address.

  • Understanding Column Data

    Each source record in the NTA Source Library has the following fields:

    • Name. Name of source device.
    • IP Address. IP Address assigned to the source device.
    • Enabled. Indicates if flow or statistics are gathered from this device.
    • Protocol. Flow protocol (if supported).
    • Credentials. Current credential assigned to the source, if any.
    • Receiving Flows. Indicates if flow source is active. ("n/a" indicates not a configured flow source).
    • Flow Rate. Flow packet rate in flows per second.
    • Traffic Totals. Indicates how total interface traffic is obtained.
      • Flow Sum indicates traffic totals are summed from flow packets.
      • Receiving indicates traffic totals are received (typical of sFlow).
      • Polling indicates that NTA is polling the source.
    • NBAR Polling. Indicates whether the source is polled for NBAR application statistics (fetched by SNMP). This statistic is a summary of what NBAR applications are used.
    • CBQoS Polling. Indicates whether the source is polled for CBQoS statistics (fetched by SNMP).
    • NBAR Embedded. Indicates whether NBAR is provided by the source in the flows sent. Please note, this option is preferred over polling for NBAR because, using this method, you know the NBAR application used for each connection.
    • ASN Embedded. Indicates whether ASN (Autonomous System Number) identification is provided by the source in the flows sent.
    • Last Active. Time of last information.

    Click a column heading ( ) to display the column selection listing . You can also include:

    • Packets Received. Number of packets received from this source from the last time the collector started.
    • Packets Lost. Estimated number of packets lost based on flow sequence numbers.
    • Reliability. Estimated reliability based on packet received and packet lost.
    • Sample Rate. Fraction of observed traffic data reported by source.