Documentation forNetFlow Traffic Analyzer
Analyzing network traffic and bandwidth is a key capability of SolarWinds Observability Self-Hosted (formerly Hybrid Cloud Observability) and is available in the Advanced edition. NetFlow Traffic Analyzer (NTA) is also available in a standalone module.

Top XX Protocols

This widget provides a quick chart view of the protocols used most for traffic on your monitored network.

When placed on the Node Details or Interface Details view, this widget provides a view of the protocols responsible for the most traffic passing through the viewed node or interface over the selected period of time.

For more information about protocols monitored by your NTA, see Configuring Protocol Monitoring.

View more details about displayed protocols

Click any listed protocol to open the NetFlow Protocol Summary view filtered by the selected protocol. For more information, see NetFlow Protocols Summary View.

Click + to expand a listed protocol and display a list of the nodes and their respective interfaces over which traffic associated with the selected protocol is currently carried.

Click any expanded node or interface to open the appropriate NetFlow Protocol view presenting related statistics for the appropriate protocol. For more information, see NetFlow Protocol View.

Top XX Protocols (Endpoint Centric)

You can customize an endpoint-centric version of this widget and place it on the NetFlow Node Details or Interface Details view. The endpoint-centric Top XX Protocols widget provides a ranked list of protocols over which the selected node or interface initiated or terminated traffic.

For more information about adding endpoint-centric widgets, see Add endpoint-centric widgets to NTA views.

Table legend

The table below the chart provides the following information:

Column Title Contents
Protocol Displays the protocol type.
Ingress Bytes, Egress Bytes
Ingress Packets, Egress Packets
Displays the amount of data (in bytes and packets) using appropriate protocols routed through the viewed node or interface over the specified time period.
The columns displayed depend on the flow direction set in the top left corner of the view (either only Ingress Bytes, or only Egress Bytes, or both columns).
Percent (Utilization) Displays the distribution of traffic through the viewed object using each listed protocol over the specified time period.

The first value describes the percentage of the appropriate item based on items shown by the chart. Individual items in the legend add up 100%. This percentage can be absolute or relative. For more information, see Set the Percentage type for Top XX lists.

A value in parentheses is available only for interfaces. It describes how the appropriate item utilizes the interface bandwidth in percentage.

If the utilization is approximately twice as high as it should be, for example 150% instead of 75%, it might be caused by flow duplication. For more information, see Resolve duplicate flows.

Edit the widget

If you are logged in using a User ID with administrative privileges, you can change the way this widget is displayed for all users:

  1. Click Edit to load the Edit Resource page.
  2. Make changes.
  3. Click Submit.

Edit time and flow direction for the view

You can also change the time period and flows direction shown by all widgets in the view:

  1. Directly below the view name, click next to the appropriate setting and define the appropriate settings.
  2. Change the Relative Time Period, by default set to 1 hour prior to the current time, or specify a specific time period.

The time and flow direction settings are limited to the current session only. After you leave the view, your changes will be lost and default settings are re-applied.