I'm currently trialling NTA and already setup flow export from Cisco 6509 with Supervisor Engine 720..
Cisco IOS Software, s72033_rp Software (s72033_rp-IPSERVICESK9_WAN-M), Version 1
2.2(33)SXH2a, RELEASE SOFTWARE (fc2)
I already set it up as explained on the how-to. and l already make sure on the collector side using wireshark that already receive the netflow packets with CFlow data received.
our solarwinds NTA is 10.1.3.23 and 10.1.3.25 is another NetFlow analyzer
here is result of show mls nde
Netflow Data Export enabled
Exporting flows to 10.1.3.25 (9996) 10.1.3.23 (2055)
Exporting flows from 10.1.6.1 (57851)
Layer2 flow creation is enabled on vlan 51
Layer2 flow export is enabled on vlan 51
Include Filter not configured
Exclude Filter not configured
Total Netflow Data Export Packets are:
22028405 packets, 0 no packets, 594766666 records
Total Netflow Data Export Send Errors:
IPWRITE_NO_FIB = 0
IPWRITE_ADJ_FAILED = 0
IPWRITE_PROCESS = 1
IPWRITE_ENQUEUE_FAILED = 0
IPWRITE_IPC_FAILED = 0
IPWRITE_OUTPUT_FAILED = 0
IPWRITE_MTU_FAILED = 0
IPWRITE_ENCAPFIX_FAILED = 0
IPWRITE_CARD_FAILED = 0
Netflow Aggregation Disabled
here is result when I do show ip flow export.
Flow export v5 is enabled for main cache
Export source and destination details :
VRF ID : Default
Source(1) 10.1.6.1 (Vlan200)
Source(2) 10.1.6.1 (Vlan200)
Destination(1) 10.1.3.25 (9996)
Destination(2) 10.1.3.23 (2055)
Version 5 flow records
11427 flows exported in 3319 udp datagrams
0 flows failed due to lack of export packet
0 export packets were sent up to process level
0 export packets were dropped due to no fib
0 export packets were dropped due to adjacency issues
0 export packets were dropped due to fragmentation failures
0 export packets were dropped due to encapsulation fixup failures
0 export packets were dropped enqueuing for the RP
0 export packets were dropped due to IPC rate limiting
0 export packets were dropped due to Card not being able to export
and I already enable netflow on interface Vlan that I want to monitor by using ip flow ingress and egress command.
all is ok with NetFlow analyzer on 10.1.3.25 but not on solarwinds NTA..
collector services is UP and running and netflow sources already giving amount of data throughput
but on the top protocol, endpoint and another details just showing me the traffic only on small bandwidth... this is not right...
it has to be in megabytes and gigabytes... that is displayed with another Netflow analyzer...
what is wrong.. is there any configuration that I missed...