Solarwinds Netflow Traffic Analyzer

A financial firm’s MPLS link saturated every night at 1 AM, but no scheduled backup existed. Solution with NTA: A custom report showed a source IP from the old data center talking to a destination port 445 (SMB) on a decommissioned server. Investigation revealed a forgotten Rsync cron job. Outcome: Stopped the job, freed 40 Mbps for daytime business.

NTA retains raw flow data (configurable from days to months). You can literally "rewind the clock" to answer: "What happened last Tuesday between 2 PM and 2:15 PM?" This is invaluable for security incident response (investigating a C2 beacon) or capacity planning. solarwinds netflow traffic analyzer

Understanding the flow of data is critical to deploying NTA successfully. The process involves three main components: A financial firm’s MPLS link saturated every night