Why, when I fail over one HA ASA to its mate, do I lose the Netflow data recorded on the first ASA in NTA?

rschroeder

There's not much to setting up Netflow in an ASA.  Enable it, point it at a Netflow collector, and it sends all of its interfaces' data to NTA.

I recently upgraded to NPM 12.2 / NCM 7.7 / NTA 4.2.3.

Yesterday I did a failover between the active and standby ASA's, and found no Netflow information for the "new" active ASA prior to the time of the failover.  That doesn't seem right to me--the ASA's take over each other's IP addresses at failover.  Shouldn't there be Netflow data for the ASA, no matter which ASA's Active?

mesverrum

I would wager that the snmp interface index don't correlate across and everything in NTA is tied to those indexes so someone made the call to disappear them in some way during a failover. Does the old data come back with a gap when you fail back over?