Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Having problems implementing Netflow on demo server...

I have it up and running, but it seems to be only monitoring traffic destined to the actual router. ie: SNMP, Telnet, EIGRP, Netflow.

Any ideas why this might be? Not very useful seeing only 60Kbps of data on a circuit that is pumping over 10Mbps of traffic...

If your wondering whether I'm receiving the flows, they should be the exact same flows we're getting on a NetQoS server that isn't having any problems seeing all the traffic...

Find more posts tagged with

Accepted answers

cnorborg

Well, we finally got our demo server back up and online and were still having the same problems as before. I had somewhat resigned myself to not having it fixed before a demo we're doing next week, but saw this in the release notes for 3.1SP2:

- A condition where TCP traffic was not monitored if it passed through any unmonitored interfaces has been corrected.

We don't commonly add anything but our Serial interfaces on the routers, so I thought I'd see if this was our problem. Sure enough, went into NPM and added the Gigabit interfaces on that router and the netflow data started showing up as expected!! Didn't even have to add them into NTA, just into NPM... I'm betting before SP2 I would have had to do both. So, "problem solved"!! Now if the economy wasn't so bad and we had some money to spend!! 8-)

Thanks to all those that tried helping me with this problem. I don't have all your email addresses, so I hope this suffices as a notice of how to solve that problem!!

All comments

mcbridea

In NetFlow Settings under Applications and Service Ports choose "Enable All Monitoring" or "Monitor all Ports" depending on the version you have.

Andy

cnorborg

Ah, forgot to mention that I've already done that. That was the first thing I thought of when I thought it was missing data. As you can see here, its definitely set that way.

mcbridea

I assume you have written 2 identical exporter configurations on the device.

Does it look like the data can be attributed to only ingress or only egress data?

I would like to see your config for the exporter and a pcap from the NTA collector if possible.

Andy

cnorborg

ip flow-export source Loopback2

ip flow-export version 5

ip flow-export destination 10.24.192.228 9995

ip flow-export destination 10.24.253.124 2055

netflow_cap.zip