Netflow on IOS-XR - invalid v9 templates from devices with the same config?

Using SolarWinds NetFlow Traffic Analyzer version: 4.1.2, I have the following Netflow configuration across 6 x ASR 9001's in our network:

flow exporter-map FE-NETFLOW

version v9

options interface-table timeout 120

options sampler-table timeout 120

transport udp 2055

source Loopback1

destination 10.240.132.23 vrf VRF-MGT

flow monitor-map FM-NETFLOW

record ipv4

exporter FE-NETFLOW

cache permanent

cache entries 10000

cache timeout active 2

cache timeout inactive 2

sampler-map SM-NETFLOW

random 1 out-of 100

interface x/x/x

flow ipv4 monitor FM-NETFLOW sampler SM-NETFLOW ingress

flow ipv4 monitor FM-NETFLOW sampler SM-NETFLOW egress

All devices are using the same code and features.

Of the 6 devices , 3 return report the error message:

NTA: Unknown traffic was received

NetFlow Receiver Service [SOLARWINDS] received an invalid V9 template with ID 256 from device x.x.x.x

Just wondering if I would expect the same configuration to return invalid templates? Would different traffic generate invalid templates?

Find more posts tagged with

ios-xr

netflow

asr 9001

cisco

Accepted answers

All comments

jamesatloop1

Are they running the same firmware?

sonic9t9

We get the same messages on our asr 9k's. We just ignore it for the most part. Seems to be working.

We also get Netflow receiver service detected long flow with the duration of ........ on xxxxx router

angryeye

Thanks, yes it all seems to be working fine but I was questioning those messages...

I also get:

NetFlow Receiver Service [xxxxx] received NetFlow V9 flows without any template for decoding them. Configure the device x.x.x.x to export an appropriate NetFlow V9 template at 1-minute intervals. See help for details.

But I have set it to export active flows every 60 seconds so again I don't think there is an issue, just Solarwinds complaining.

angryeye

Yes, exact same firmware and features.

braulioj

Just a question: Could you see the Interface Traffic Utilization in Netflow by IP, Autonomous System, others, correctly???

I am asking because i have some issue:

I want it see Interface traffic utilization by Autonomous System and is providing me the amount total of traffic received.

(More specific: I want it see how much utilization is my interfaces using when my users/clients are going to "Facebook" i can create a filter using the Facebook Autonomous System) but Solarwinds is providing me the amount of traffic sent/received in bytes and say something like 30 TB in the last 5 minutes) and i am expecting something like you are using 6 GB from your 10G interface...

Thks,

_JS