Netflow Traffic pointed to Amazon Load Balancer

I have my cloud guys create a ELB for me in AWS. But when i point my Netflow to the IP, i get nothing coming to the pollers. I checked the config of the ELB and it seems right. The listening ports are correct, and the assigned server are my 4 pollers. Is there anything special that you have seen to make this work? Thank you!

Find more posts tagged with

netflow_nta

netflow

netflow traffic analyzer

cisco

cisco_netflow

netflow_traffic

elb

Accepted answers

All comments

stibi

Hi @tturner ,

Please check if you are getting the NetFlow data on the servers by using WireShark. The tool will help you identify the traffic that is going for example on specific port like 2055. Good thing is also that the capturing is happening before the firewall rules, so if you see no packets then the data are either not send or are lost on the network path to the server.

If you are getting the NetFlow data then please check the source IP Address. Based on the documentation https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-target-groups.html#client-ip-preservation the client IP Preservation for the Load Balancer should be enabled by default for UDP. I would still recommend to check it as in NTA the Source IP Address of the device is used to match it with the "Orion Node" that is added in NPM. If the Load Balancer will change the IP Addresses then we are not able to distinguish the device which is sending the NetFlow traffic.

Hope this helps.