cancel
Showing results for 
Search instead for 
Did you mean: 
mmedwid
Level 11

Netflow unhappy with Cisco 3850 flow format

Jump to solution

I have one Cisco device - a 3850      Version 03.03.01SE that the Solar Winds NTA is rejecting for its format. The Help button in the error message sent me to a page does not exist. 😞 And my web search is not being productive. I want to see the traffic that flowing through the device - particularly what end systems are using the most traffic. If I could get BGP information that'd be a bonus.

NetFlow Receiver Service [ORION-123] received NetFlow V9 flows without any template for decoding them. Configure the device 10.1.10.6 to export an appropriate NetFlow V9 template at 1-minute intervals. See help for details.

flow record FlowRecord

match ipv4 tos

match ipv4 protocol

match ipv4 source address

match ipv4 destination address

match transport source-port

match transport destination-port

match interface input

collect interface output

collect counter packets long

0 Kudos
2 Replies

Re: Netflow unhappy with Cisco 3850 flow format

Jump to solution

Hi, you can capture a PCAP of the exported flows (using Wireshark for example) and see which mandatory fields are missing to deduce which device configuration is missing/wrong based on this article: Success Center

Cheers,

Jiri

0 Kudos
mmedwid
Level 11

Re: Netflow unhappy with Cisco 3850 flow format

Jump to solution

After I posted - I found the solution here: NetFlow on Cisco Switches: NetFlow v9 configuration for Cisco Catalyst 3850

Thank you much for your reply.

0 Kudos