0 Replies Latest reply on Aug 22, 2014 11:20 AM by maladil

    Real-time Netflow export not working with flexible netflow config v5 or v9 from 881W

    maladil

      I have configured a Cisco 881W with flexible netflow to export to my laptop running Engineer Toolkit v10.9.1.30.  The router is definitely sending netflow to my laptop ( i confirmed with wire-shark capture ).  I see the interfaces in the Netflow Realtime window.  I see traffic in and traffic out in the columns.  But it does not seem to take in the netflow traffic.  Wireshark can identify it as netflow v9 or v5, so I don't know why solarwinds realtime Netflow can't.  I also made sure to open up Netflow on 2055 through windows firewall.

       

      The Flexible Netflow config looks like this:

      flow record cascade-record

      description Riverbed Cascade Gateway

      match ipv4 tos

      match ipv4 protocol

      match ipv4 source address

      match ipv4 destination address

      match transport source-port

      match transport destination-port

      match interface input

      match interface output

      collect routing next-hop address ipv4

      collect transport tcp flags

      collect counter bytes

      collect counter packets

      collect timestamp sys-uptime first

      collect timestamp sys-uptime last

       

      flow exporter SW-export

      description Export to Laptop-SW

      destination x.x.x.x

      source Vlan1

      transport udp 2055

      export-protocol netflow-v5

      template data timeout 1200

      option interface-table timeout 3600

      option exporter-stats timeout 60

       

      flow monitor Laptop-SW-monitor

      description Laptop SW Toolset

      exporter SW-export

      cache timeout active 60

      record cascade-record

       

      interface Vlan1

      description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$CVO$

      ip address x.x.x.x 255.255.255.248

      ip flow monitor cascade-monitor output

      ip flow monitor Laptop-SW-monitor output

      ip flow ingress

      ip tcp adjust-mss 1360

      service-policy input Classify_Inbound_COS

      service-policy output QoS_Monitoring