This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.

You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Real-Time NetFlow Analyzer and other Flow Types

acherman over 14 years ago

Does the Real-Time NetFlow Analyzer have support for any flow sampling other than NetFlow? ie. sFlow, JFlow, etc?

Found this thread:

Mark Wiggans said 2.5 years ago that it is possible in a future release, but......

0 mcbridea over 14 years ago

It does support sflow
Cancel
Vote Up 0 Vote Down

Cancel
0 acherman over 14 years ago in reply to mcbridea

Well, then I seem to be having an issue. haha I have setup an Extreme switch to export flow data to an workstation, the Real-Time tool is up, I have added the switch, I see the interfaces and I see traffic stats in the list for the interface I want to watch. When I click Start Flow Capture I get an error stating that NetFlow is not detected on the selected interface. Wireshark confirms I have the sFlow packets coming to this workstation.
Cancel
Vote Up 0 Vote Down

Cancel
0 mcbridea over 14 years ago in reply to acherman

It's got to be sflow v5
Cancel
Vote Up 0 Vote Down

Cancel
0 acherman over 14 years ago in reply to mcbridea

Packet info from WireShark shows v5...
Cancel
Vote Up 0 Vote Down

Cancel
0 MarieB over 14 years ago in reply to acherman

Hi There---
Have you looked at the KB article that addresses flow template fields required for NTA? Take a look and see if that helps. If not, I'd open a support ticket on this.
M
Cancel
Vote Up 0 Vote Down

Cancel
0 mcbridea over 14 years ago in reply to MarieB

The output IfIndex =0 is probably the issue.
Cancel
Vote Up 0 Vote Down

Cancel
0 acherman over 14 years ago in reply to mcbridea

Thanks Andy, the templates from devices seems to be causing me issues lately (could not get NTA to accept NetFlow data from a pfSense router).
So, is there a reason NTA would accept these sFlow packets from this switch and the RealTime tool wouldn't?
Cancel
Vote Up 0 Vote Down

Cancel
0 acherman over 14 years ago in reply to MarieB

Hi Marie, from the Notes of the KB:
When SolarWinds states that a device is supported by Orion NTA, SolarWinds has determined that at least one of the templates the device is capable of exporting will satisfy the Orion NTA requirements.
I've looked and can't find the list. All I can find is the list of Multi-Vendor Support (extreme being one of them).
Cancel
Vote Up 0 Vote Down

Cancel
0 MarieB over 14 years ago in reply to acherman

Hey Aaron--
Let me check on this and get back to you. Sorry for the delay.
M
Cancel
Vote Up 0 Vote Down

Cancel
0 acherman over 14 years ago in reply to MarieB

Hi Marie, just curious if you were able to find out any info on this for me? I have still not had any luck getting the Real-time tool to work with these Extreme switches. I will be opening a trouble ticket.
Aaron
Cancel
Vote Up 0 Vote Down

Cancel