Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Last Received Netflow: NEVER

Hello,

I currently have a 6509 running IOS Version: 12.2(50)SY. Under the Netflow module it shows "LAST RECEIVED NETFLOW" as "never", though it shows "LAST RECEIVED CBQOS" as "3/5/12 9:00AM". So I believe the 6509 is communicating with my Solarwinds server on port 2055 (CBQOS is being updated) but I don't understand why I am not getting any Netflow flows:

!
flow exporter FL01-Exporter
destination 172.32.209.142 vrf management
source Loopback0
transport udp 2055
!
!
flow monitor FL01-Monitor
record platform-original ipv4 full
exporter FL01-Exporter
!
interface GigabitEthernet1/1/1
no switchport
ip address 172.32.209.1 255.255.255.252
ip flow monitor FL01-Monitor input
ip flow monitor FL01-Monitor output

Any ideas what I may be doing wrong?

Thanks,

tim

Find more posts tagged with

Accepted answers

All comments

mavturner

Tim,

CBQoS data is polled via SNMP and doesn't indicate anything about receiving flows.

Do you see any events in the NTA Events resource? Also, if you do a packet capture on the server, do you see the flows coming in (in Wireshark you can use the cflow display filter to quickly see the traffic).

Mav

tpfannes

Mav,

Thanks for the quick reply. I just did a capture and packets are getting to the Solarwinds server. Looking at wireshark output they are on the correct port 2055 (CFLOW) and they are version 9.

Thanks,

tim

rdrash

I'm having the same problem too. I see flows leaving the router and hitting the server. I made sure that Netflow is set to allow flows from that router but no luck.

tpfannes

All,

I finally got it to work (lots of tinkering), this is my config:

flow record FR1

match ipv4 tos

match ipv4 protocol

match ipv4 source address

match ipv4 destination address

match transport source-port

match transport destination-port

match interface input

collect ipv4 source prefix

collect ipv4 source mask

collect ipv4 destination mask

collect transport tcp flags

collect interface output

collect counter bytes

collect counter packets

collect timestamp sys-uptime first

collect timestamp sys-uptime last

flow exporter FEX1

destination 10.1.1.101

source Loopback0

transport udp 2055

template data timeout 60

flow monitor FM1

record FR1

exporter FEX1

cache timeout inactive 10

cache timeout active 60

cache type immediate

cache entries 1000

interface Vlan30

ip address 192.32.209.1 255.255.255.224

ip flow monitor FM1 input

ip flow monitor FM1 output

end