Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Not all trraffic showing up in Netflow

I hope I can describe this. We have 3 sites and netflow setup on all 3 routers. I am getting reading from all 3 routers so netflow is somewhat working. All traffic from our headquarters to the remote sites show, but traffic from remote site to remote site doesn't. I guess I should add that we have an MPLS cloud that connect all three sites. I can see the traffic on the routers, but it doesn't show up on the solarwinds netflow.

Anyone have any ideas???

Find more posts tagged with

Accepted answers

All comments

mcbridea

A couple of questions. Are the routers inside or outside the MPLS network (PE or CE routers). Do you have ingress and egress NetFlow data exporters set up on all 3 routers?

svanguilder

The routers are on the inside and I do have ingress and egress exporters setup on all three routers. I see traffic to and from remote 1 to HQ and to and from remote2, what I don't see is traffic to and from remote 1 and remote 2.

mcbridea

Can you give me some config snippets and NTA sereen shots?

svanguilder

Here is the netflow config from the HQ and one of the remote sites, both remotes are configed identical. Below is are shots from yesterday at the sites that were talking but didn't show that they were. 10.25.85.0 /24 is the HQ subnet 10.25.92.0 /24 and 10.25.10.0 /24 are the remote subnets. I could see the traffic on the routers themselves but it didn't show in NTA.

HQ Router

ip flow export destination 10.25.85.34 2055 source eth 0/1
ip flow cache timeout active 5
ip flow cache timeout inactive 10
ip flow top-talkers
top 20

LAKEC-MOUNTAINIRON#sho ip flow interface

ppp 1
ip flow ingress
ip flow egress

Remote site

ip flow export destination 10.25.85.34 2055 source eth 0/1
ip flow cache timeout active 5
ip flow cache timeout inactive 10
ip flow top-talkers
top 20

LAKEC-Moose#sho ip flow interface

ppp 1
ip flow ingress
ip flow egress

Top 10 Conversations

11/12/2009 10:00:00 AM~11/12/2009 3:30:00 PM

54.65

Conversation	Total Bytes	Total Packets	Percent
10.25.10.254 to/from misvanguilder09.worldbestrec.com (10.25.85.104)	554.6 Kbytes	571 packets	54.65%
10.25.10.254 to/from solarwinds.worldbestrec.com (10.25.85.34)	157.3 Kbytes	134 packets	15.5%
10etechnb06.worldbestrec.com (10.25.10.124) to/from olympia.worldbestrec.com (10.25.85.48)	106.6 Kbytes	1.334 K packets	10.5%
10rangre.worldbestrec.com (10.25.10.140) to/from vaexchange.worldbestrec.com (10.25.85.60)	88.9 Kbytes	576 packets	8.76%
memphis.worldbestrec.com (10.25.10.1) to/from vaexchange.worldbestrec.com (10.25.85.60)	17.0 Kbytes	37 packets	1.68%
10llathcall.worldbestrec.com (10.25.10.130) to/from 25109dbs.worldbestrec.com (10.25.85.1)	12.3 Kbytes	183 packets	1.21%
10cstechvn07.worldbestrec.com (10.25.10.120) to/from 25109dbs.worldbestrec.com (10.25.85.1)	9.9 Kbytes	144 packets	0.98%
10chcckr.worldbestrec.com (10.25.10.112) to/from 25109dbs.worldbestrec.com (10.25.85.1)	5.1 Kbytes	56 packets	0.5%
10.25.10.250 to/from solarwinds.worldbestrec.com (10.25.85.34)	4.5 Kbytes	52 packets	0.45%
10cf30stakermt.worldbestrec.com (10.25.10.80) to/from vaexchange.worldbestrec.com (10.25.85.60) Top 10 Conversations 11/12/2009 10:00:00 AM~11/12/2009 3:30:00 PM 54.95

Conversation	Total Bytes	Total Packets	Percent
cannon.worldbestrec.com (10.25.85.43) to/from 92rlgenmg08.worldbestrec.com (10.25.92.100)	301.0 Kbytes	833 packets	54.95%
cannon.worldbestrec.com (10.25.85.43) to/from graclafton08.worldbestrec.com (10.25.92.167)	47.7 Kbytes	358 packets	8.71%
25109dbs.worldbestrec.com (10.25.85.1) to/from gr667ddk.worldbestrec.com (10.25.92.117)	17.9 Kbytes	258 packets	3.27%
25109dbs.worldbestrec.com (10.25.85.1) to/from grscrowe07.worldbestrec.com (10.25.92.91)	15.6 Kbytes	222 packets	2.85%
25109dbs.worldbestrec.com (10.25.85.1) to/from grjotten2008.worldbestrec.com (10.25.92.143)	12.7 Kbytes	180 packets	2.32%
cannon.worldbestrec.com (10.25.85.43) to/from 92opercdjp06.worldbestrec.com (10.25.92.121)	12.7 Kbytes	47 packets	2.32%
25109dbs.worldbestrec.com (10.25.85.1) to/from communicationsm.worldbestrec.com (10.25.92.119)	11.9 Kbytes	167 packets	2.17%
25109dbs.worldbestrec.com (10.25.85.1) to/from 92opercdjp06.worldbestrec.com (10.25.92.121)	11.2 Kbytes	160 packets	2.05%
25109dbs.worldbestrec.com (10.25.85.1) to/from graclafton08.worldbestrec.com (10.25.92.167)	8.0 Kbytes	120 packets	1.46%

4.3 Kbytes45 p