Solved

netflow from Cisco 2811 not arriving at destination?

Posted on 2011-03-02
3
1,020 Views
Last Modified: 2012-06-27
As you can see below - exported flows count is incrementing.  But in my Solar Winds netflow collector "Last Received Netflow" is saying "Never".  The incrementing counter should mean that the router is properly trying to send the netflow info - right?

c2811-1#sho ip flow export
Flow export v5 is enabled for main cache
  Export source and destination details :
  VRF ID : Default
    Source(1)       10.10.5.1 (GigabitEthernet1/0.1)
    Destination(1)  10.10.1.15 (2055)
  Version 5 flow records
  123940560 flows exported in 5169293 udp datagrams
  0 flows failed due to lack of export packet
  0 export packets were sent up to process level
  0 export packets were dropped due to no fib
  0 export packets were dropped due to adjacency issues
  0 export packets were dropped due to fragmentation failures
  0 export packets were dropped due to encapsulation fixup failures

c2811-1#sho ip flow export
Flow export v5 is enabled for main cache
  Export source and destination details :
  VRF ID : Default
    Source(1)       10.10.5.1 (GigabitEthernet1/0.1)
    Destination(1)  10.10.1.15 (2055)
  Version 5 flow records
  123941197 flows exported in 5169314 udp datagrams
  0 flows failed due to lack of export packet
  0 export packets were sent up to process level
  0 export packets were dropped due to no fib
  0 export packets were dropped due to adjacency issues
  0 export packets were dropped due to fragmentation failures
  0 export packets were dropped due to encapsulation fixup failures
0
Comment
Question by:amigan_99
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 24

Accepted Solution

by:
rfc1180 earned 500 total points
ID: 35023491
> 10.10.1.15
This is the destination, but it is not on the same broadcast domain.

Are you able to confirm ip connectivity end to end (ICMP, traceroute, etc).
Is the network in the routing table?
How is the routing tables end to end?
Are there any filters in the path that might be dropping UDP packets?
Have you ran wireshark of some sort on the Solarwinds host to see if the packets are even arriving?

Billy
0
 
LVL 1

Author Comment

by:amigan_99
ID: 35028276
If I ping from the source interface for netflow I can ping the collector - yes.  That's a good thought to look at wireshark on solar winds.  I think it's on there actually.
0
 
LVL 1

Author Closing Comment

by:amigan_99
ID: 35030056
Well the cflow data is definitely not getting there - confirmed via wireshark.  Thanks for the reminder.
0

Featured Post

Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Wireshark Network Packet Analysis of PS4 7 62
Performance monitors 6 69
Wireless Authentication 3 51
Mac address in Nexus7K fex port 5 38
Load balancing is the method of dividing the total amount of work performed by one computer between two or more computers. Its aim is to get more work done in the same amount of time, ensuring that all the users get served faster.
David Varnum recently wrote up his impressions of PRTG, based on a presentation by my colleague Christian at Tech Field Day at VMworld in Barcelona. Thanks David, for your detailed and honest evaluation!
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question