We are sending netflow version 5 from the VLAN interfaces on a pair of Cisco 6509 switches. The traffic reported in NTA 2.21 doesn't match known traffic in our network. For example when monitoring our internet edge we see NTP and ICMP traffic with some occasional UDP, however no TCP. Other interfaces show unreliable data as well.
Is there a release of NTA which will correct these issues due to release?
ip flow-export source Loopback1 (loopback i/f is managed by Orion)
ip flow-export version 5
ip flow-export destination 10.135.216.110 2055
description Loopback Interface
ip address 10.135.250.1 255.255.255.255
description Internet Edge Inside
ip address 10.135.214.2 255.255.255.240
no ip redirects
no ip proxy-arp
ip route-cache flow
standby 1 ip 10.135.214.1
standby 1 preempt