Nexus7010 - NetFlow Receiver Service xxxx is receiving a NetFlow data stream from an unmanaged interface

Question

We have recently upgraded our Core network infrastructure to Cisco Nexus 7010 Switches.  Since the upgrade I am unable to get Orion Netflow to see the data, when I look at the Netflow Sources it shows the two switches but they have never seen any netflow data.

The event summary shows: -

NetFlow Receiver Service [xxxxx] is receiving a NetFlow data stream from an unmanaged interface on xxxxxxxxx. The NetFlow data stream will be discarded. Please use Orion Node Management to manage interface '#81' in order to process this NetFlow data stream, or just use Edit this device.

All interfaces on the Nexus are being monitored by NPM with a read/write community string.

The switch config is: -

ip route-cache flow infer-fields

ip flow ingress infer-fields

ip flow-cache timeout active 1

ip flow-export source Vlan1

ip flow-export version 5

ip flow-export destination xxxxxxxxx 2055

I know the Orion server is constantly seeing streams from the IP's because I have capture port 2055 on Wireshark and I am seeing a constant stream of data.

Any idea's?

chris.newton · Answer

I can confirm Orion is monitoring vlan 1.

I will log a support ticket.

Thanks for the speedy replies.

Martin.Krivanek · Answer

Hi,

there seems to be an issue with interface indexes not matching those in flows. If you have all interfaces on Nexus managed by Orion and still aren't getting any data, I would suggest you to open support ticket to investigate this more.

Best regards,

Martin

jeff.stewart · Answer

You're exporting the flow from VLAN1.  Are you monitoring interface vlan 1 within Orion?  You could always change the export to your loopback interface and make sure that is in Orion.