1 Reply Latest reply on Feb 17, 2010 12:18 PM by Andy McBride

    Using external collector (e.g. NProbe) to collect NetFlow data

    Swine

      We're running a network with non-NetFlow-supported switches (3750s) and we're trying to use an external PC to and a SPAN session to collect traffic and forward it as NetFlow data to NTA.  Initially, NTA showed an alert that it had received a NetFlow data stream from our PC, but it said we had to add it as a managed node.  We added it, but set it to manage via ICMP only, because the PC is not set up for SNMP.  Then I got a message saying "You have not enabled NetFlow data export on (the PC)", and it had a link to a Thwack article on how to enable NetFlow on Cisco switches.  Now I'm not sure if I'm getting NetFlow data or not, but I suspect not because I haven't been able to search on Protocols or end points, etc.

      I did find some documentation on Thwack that advised the following:

      • Add the server running nProbe to Orion, including all interfaces
      • Add the server interfaces as monitored NetFlow Source

      I added our server, but via ICMP only, so there was no option to include any interfaces.  Do you think this would be a problem?

      Thanks.