6 Replies Latest reply on Jun 1, 2010 12:17 PM by Andy McBride

    NetFlow getting to server, but not displaying

      Exporting NetFlow data from a Cisco UC500 to Solarwinds Server on the same subnet as vlan1.

      Data not getting to the server. Device is setup in NPM and SNMP working fine.

      Is there any log in Solarwinds to see "raw" netflow traffic coming in, so I can confirm the data is hitting the server?

       

      UC500 Config:

      interface FastEthernet0/0
       ip route-cache flow
       ip flow ingress
       ip flow egress

      ip flow-export source Vlan1 (192.168.10.1)
      ip flow-export version 5
      ip flow-export destination 192.168.10.8 9996

       

      Output....

      router#show ip flow export
      Flow export v5 is enabled for main cache
        Export source and destination details :
        VRF ID : Default
          Source(1)       192.168.10.1 (Vlan1)
          Destination(1)  192.168.10.8 (9996)
        Version 5 flow records
        33075 flows exported in 1163 udp datagrams
        0 flows failed due to lack of export packet
        0 export packets were sent up to process level
        0 export packets were dropped due to no fib
        0 export packets were dropped due to adjacency issues
        0 export packets were dropped due to fragmentation failures
        0 export packets were dropped due to encapsulation fixup failures

       

      router#sh ip cache flow

      Protocol         Total    Flows   Packets Bytes  Packets Active(Sec) Idle(Sec)
      --------         Flows     /Sec     /Flow  /Pkt     /Sec     /Flow     /Flow
      TCP-Telnet          66      0.0        90    40      0.0      22.7      14.3
      TCP-WWW           8766      0.0        30  1070      0.0       3.6       8.3
      TCP-X                5      0.0         1    40      0.0       0.0      15.6
      TCP-other        21153      0.0         3   383      0.0       1.2      14.3
      UDP-DNS           1127      0.0         1    65      0.0       0.0      15.4
      UDP-other         1701      0.0         3   116      0.0       1.2      15.4
      ICMP               677      0.0         1    56      0.0       0.0      15.5
      Total:           33495      0.0        10   887      0.0       1.8      12.8