5 Replies Latest reply on Dec 11, 2011 11:09 PM by nrms

    Unable to view netflow export

    Calvary

      Hey all,

      here is the cisco 1800 series router configuration.

      sh ip flow export
      Flow export v5 is enabled for main cache
        Export source and destination details :
        VRF ID : Default
          Source(1)       10.37.###.85 (Loopback0)
          Destination(1)  10.0.0.36 (9995)
        Version 5 flow records
        2398 flows exported in 81 udp datagrams
        0 flows failed due to lack of export packet
        0 export packets were sent up to process level
        0 export packets were dropped due to no fib
        0 export packets were dropped due to adjacency issues
        0 export packets were dropped due to fragmentation failures
        0 export packets were dropped due to encapsulation fixup failures

      ========================================================
      config ;
      ip flow-cache timeout active 1
      ip flow-export source Loopback0
      ip flow-export version 5
      ip flow-export destination 10.0.0.36 9995
      !
      interface FastEthernet0/1
      ip flow ingress
      ip flow egress
      !
      end

      Netflow is installed on a Server 08 box with the windows firewall disable.

      Any help would be awesome,

       

      Mitch

        • Re: Unable to view netflow export
          nrms

          2 quick questions:

          1. What IP address are you using to monitor the flow in NTA?
          2. Is port 9995 listed in the list of monitored ports on the NTA box? I think normally only 2055 is configured by default.

            • Re: Unable to view netflow export
              Calvary

              1 = im using 10.0.0.36 as my solarwinds server. can you please elaberate on that one? do you mean "NetFlow Collector Services"? if so, then yes, but i can only see it as a name, not an IP.

              2 = i have manually changed it to 9995

              Thank you for your quick response

                • Re: Unable to view netflow export
                  nrms

                  Point 2 has the answer I wanted to hear :)

                  Regarding point 1; in NTA (I am assuming this is the Orion version of NTA with the web interface) you will have added the node you are monitoring. Does the IP address assigned to that node match the IP address you are using as the Source (the 10.37.###.85 address)?

                  The joys of working somewhere where today is pseudo-Wednesday, and we start work at 7am! :)