4 Replies Latest reply on Apr 6, 2012 11:29 AM by tpfannes

    Last Received Netflow: NEVER

    tpfannes

      Hello,

      I currently have a 6509 running IOS Version: 12.2(50)SY.  Under the Netflow module it shows "LAST RECEIVED NETFLOW" as "never", though it shows "LAST RECEIVED CBQOS" as "3/5/12 9:00AM".  So I believe the 6509 is communicating with my Solarwinds server on port 2055 (CBQOS is being updated) but I don't understand why I am not getting any Netflow flows:

      !
      flow exporter FL01-Exporter
       destination 172.32.209.142 vrf management
       source Loopback0
       transport udp 2055
      !
      !
      flow monitor FL01-Monitor
       record platform-original ipv4 full
       exporter FL01-Exporter
      !
      interface GigabitEthernet1/1/1
       no switchport
       ip address 172.32.209.1 255.255.255.252
       ip flow monitor FL01-Monitor input
       ip flow monitor FL01-Monitor output

      Any ideas what I may be doing wrong?

      Thanks,

      tim

        • Re: Last Received Netflow: NEVER
          mavturner

          Tim,

          CBQoS data is polled via SNMP and doesn't indicate anything about receiving flows.

          Do you see any events in the NTA Events resource? Also, if you do a packet capture on the server, do you see the flows coming in (in Wireshark you can use the cflow display filter to quickly see the traffic).

          Mav

            • Re: Last Received Netflow: NEVER
              tpfannes

              Mav,

               

              Thanks for the quick reply.  I just did a capture and packets are getting to the Solarwinds server.  Looking at wireshark output they are on the correct port 2055 (CFLOW) and they are version 9. 

               

              Thanks,

               

              tim

                • Re: Last Received Netflow: NEVER
                  rdrash

                  I'm having the same problem too. I see flows leaving the router and hitting the server.  I made sure that  Netflow is set to allow flows from that router but no luck.

                    • Re: Last Received Netflow: NEVER
                      tpfannes

                      All,

                       

                      I finally got it to work (lots of tinkering), this is my config:

                       

                      flow record FR1

                      match ipv4 tos

                      match ipv4 protocol

                      match ipv4 source address

                      match ipv4 destination address

                      match transport source-port

                      match transport destination-port

                      match interface input

                      collect ipv4 source prefix

                      collect ipv4 source mask

                      collect ipv4 destination mask

                      collect transport tcp flags

                      collect interface output

                      collect counter bytes

                      collect counter packets

                      collect timestamp sys-uptime first

                      collect timestamp sys-uptime last

                      !

                      !

                      flow exporter FEX1

                      destination 10.1.1.101

                      source Loopback0

                      transport udp 2055

                      template data timeout 60

                      !

                      !

                      flow monitor FM1

                      record FR1

                      exporter FEX1

                      cache timeout inactive 10

                      cache timeout active 60

                      cache type immediate

                      cache entries 1000

                       

                       

                      interface Vlan30

                      ip address 192.32.209.1 255.255.255.224

                      ip flow monitor FM1 input

                      ip flow monitor FM1 output

                      end