I am unable to get Solarwinds Netflow Traffic Analyzer to collect the F5 sflow statistics.
I have packet captures that show the flows are getting to the Solarwinds server, but they never show up in the UI. Any ideas?
Hi there,
Is the flow being sent to port 2055? Is port 2055 added to the server firewall?
Yes, I have changed the F5 to use port 2055. Below is some of the traffic captured on the firewall. 1.1.1.1 is the F5 device and 2.2.2.2 is the Solarwinds NTA server.
1: 16:55:16.348706 802.1Q vlan#92 P0 1.1.1.1.58065 > 2.2.2.2.2055: udp 1328
2: 16:55:16.348736 802.1Q vlan#92 P0 1.1.1.1.58065 > 2.2.2.2.2055: udp 432
3: 16:55:26.353695 802.1Q vlan#92 P0 1.1.1.1.58065 > 2.2.2.2.2055: udp 1328
4: 16:55:26.353726 802.1Q vlan#92 P0 1.1.1.1.58065 > 2.2.2.2.2055: udp 432
Could you confirm with the documentation of the software version running, whether it generates sFlow counters?
F5, even though it creates sFlow isn't on the supported list of vendors for NTA at the moment. However, if it creates sFlow counters then you may be in luck.
I believe so, here is a chart from their support site. AskF5 | Manual Chapter: Monitoring BIG-IP System Traffic with sFlow
