Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Can't see netflow packets

Hi!

We cannot see the packets traversing the interface. We have configured the ip route cache flow on the multilink interface as well as its member interfaces. Including the ff. commands:

ip flow-export source Multilink1
ip flow-export version 9
ip flow-export destination <ip address of Orion Server> 2055

And all we could see on the TOP CONVERSATIONS is the ip address of the multilink interface.

Anyone???

Find more posts tagged with

Accepted answers

Jesquitin

roselyn,

It is recommended to only enable Netflow on the Multilink interace and not the member interfaces. Also is this router performing NAT? If it is then you would want to capture Netflow form the LAN interface in order to see the internal private IP addresses.

Hope this helps.

All comments

Jesquitin

roselyn,

Hope this helps.

roselyn

Hi Jesquitin,

Should we need to still specify the source as in this case:

ip flow-export source Multilink1

or should it be

ip flow-export source loopback1

or no source???

Jesquitin

Roselyn,

It is best practice to always specify a source ( interface with IP address Orion NPM is managing device by) If a source is not specified the device will choose one and it is not always the one with IP address in Orion NPM for the device