Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

netflow from Cisco 2811 not arriving at destination?

Posted on 2011-03-02
3
Medium Priority
?
1,041 Views
Last Modified: 2012-06-27
As you can see below - exported flows count is incrementing.  But in my Solar Winds netflow collector "Last Received Netflow" is saying "Never".  The incrementing counter should mean that the router is properly trying to send the netflow info - right?

c2811-1#sho ip flow export
Flow export v5 is enabled for main cache
  Export source and destination details :
  VRF ID : Default
    Source(1)       10.10.5.1 (GigabitEthernet1/0.1)
    Destination(1)  10.10.1.15 (2055)
  Version 5 flow records
  123940560 flows exported in 5169293 udp datagrams
  0 flows failed due to lack of export packet
  0 export packets were sent up to process level
  0 export packets were dropped due to no fib
  0 export packets were dropped due to adjacency issues
  0 export packets were dropped due to fragmentation failures
  0 export packets were dropped due to encapsulation fixup failures

c2811-1#sho ip flow export
Flow export v5 is enabled for main cache
  Export source and destination details :
  VRF ID : Default
    Source(1)       10.10.5.1 (GigabitEthernet1/0.1)
    Destination(1)  10.10.1.15 (2055)
  Version 5 flow records
  123941197 flows exported in 5169314 udp datagrams
  0 flows failed due to lack of export packet
  0 export packets were sent up to process level
  0 export packets were dropped due to no fib
  0 export packets were dropped due to adjacency issues
  0 export packets were dropped due to fragmentation failures
  0 export packets were dropped due to encapsulation fixup failures
0
Comment
Question by:amigan_99
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 24

Accepted Solution

by:
rfc1180 earned 2000 total points
ID: 35023491
> 10.10.1.15
This is the destination, but it is not on the same broadcast domain.

Are you able to confirm ip connectivity end to end (ICMP, traceroute, etc).
Is the network in the routing table?
How is the routing tables end to end?
Are there any filters in the path that might be dropping UDP packets?
Have you ran wireshark of some sort on the Solarwinds host to see if the packets are even arriving?

Billy
0
 
LVL 1

Author Comment

by:amigan_99
ID: 35028276
If I ping from the source interface for netflow I can ping the collector - yes.  That's a good thought to look at wireshark on solar winds.  I think it's on there actually.
0
 
LVL 1

Author Closing Comment

by:amigan_99
ID: 35030056
Well the cflow data is definitely not getting there - confirmed via wireshark.  Thanks for the reminder.
0

Featured Post

Ask an Anonymous Question!

Don't feel intimidated by what you don't know. Ask your question anonymously. It's easy! Learn more and upgrade.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Shadow IT is coming out of the shadows as more businesses are choosing cloud-based applications. It is now a multi-cloud world for most organizations. Simultaneously, most businesses have yet to consolidate with one cloud provider or define an offic…
Use of TCL script on Cisco devices:  - create file and merge it with running configuration to apply configuration changes
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …

604 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question