Unmanaged interface error- using nprobe

Question

Does anyone know if there could be another reason why I am receiving this error?

03/12/2007 17:49
NetFlow Receiver Service [HMAN17] is receiving a NetFlow data stream from an unmanaged interface on x.16.15.152. The NetFlow data stream will be discarded. Please use the Orion System Manager to add Interface #2 in order to process this NetFlow data stream.

I am monitoring every interface on this device so this is not a true error.

I am using nprobe and have tried to manipulate every option and have now run out of ideas.

I just wondered if there could be another reason as to why i receive this error.

Thanks

Sam

menz · Answer

THIS WORKS......!!!

I thought i had tried every combination but i used

nprobe /c -i 1 -nxxx:2055 -u 1 -Q 1

and it worked. I have been working on this solid for about 5 days so I'm really chuffed.

Many thanks

Sam

darryld · Answer

I have also noted problems with using nprobe where the if index is in the 65000 range, I think it may be a bug in nprobe. I have usually got around the problem by using the loopback if's index as this tends to be in the 0 to 10 range

menz · Answer

The nprobe is installed onto a pc and one of the nic's is plugged into a cisco span port. The other is into the normal network port. When you run nprobe you have to specify the source interface to monitor as per:

nprobe /c -i 2 (nprobe shows you what interface nrpobe see's as the index number)

Then you have to speciy the flow in and out source index. The developer of nprobe states that the

-u and -Q settings are the snmp index numbers of the interfaces associated with the flow. If you do

not specify these interfaces then it defaults to the mac octets of the source which is seen by Orion

as being an invalid interface. So i did an snmp walk and obtained the snmp index's.

The command is then

nprobe /c -i2 -n destination ip:port (orion module) -u 65549 -Q 65549

That should work and I have tried 100's of combinations of the above command.

This worked well in the testing environment although I used a pc for this.

I just hoped someone has some idea of the product and my problem with the integration.

I've enclosed a diagram too.

Thanks

Sam

NPROBE2.jpg