Link to home
Start Free TrialLog in
Avatar of amigan_99
amigan_99Flag for United States of America

asked on

netflow from Cisco 2811 not arriving at destination?

As you can see below - exported flows count is incrementing.  But in my Solar Winds netflow collector "Last Received Netflow" is saying "Never".  The incrementing counter should mean that the router is properly trying to send the netflow info - right?

c2811-1#sho ip flow export
Flow export v5 is enabled for main cache
  Export source and destination details :
  VRF ID : Default
    Source(1)       10.10.5.1 (GigabitEthernet1/0.1)
    Destination(1)  10.10.1.15 (2055)
  Version 5 flow records
  123940560 flows exported in 5169293 udp datagrams
  0 flows failed due to lack of export packet
  0 export packets were sent up to process level
  0 export packets were dropped due to no fib
  0 export packets were dropped due to adjacency issues
  0 export packets were dropped due to fragmentation failures
  0 export packets were dropped due to encapsulation fixup failures

c2811-1#sho ip flow export
Flow export v5 is enabled for main cache
  Export source and destination details :
  VRF ID : Default
    Source(1)       10.10.5.1 (GigabitEthernet1/0.1)
    Destination(1)  10.10.1.15 (2055)
  Version 5 flow records
  123941197 flows exported in 5169314 udp datagrams
  0 flows failed due to lack of export packet
  0 export packets were sent up to process level
  0 export packets were dropped due to no fib
  0 export packets were dropped due to adjacency issues
  0 export packets were dropped due to fragmentation failures
  0 export packets were dropped due to encapsulation fixup failures
ASKER CERTIFIED SOLUTION
Avatar of rfc1180
rfc1180
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of amigan_99

ASKER

If I ping from the source interface for netflow I can ping the collector - yes.  That's a good thought to look at wireshark on solar winds.  I think it's on there actually.
Well the cflow data is definitely not getting there - confirmed via wireshark.  Thanks for the reminder.