Solved

Netflow Randomly Stopped Working

Posted on 2013-07-01
2
966 Views
Last Modified: 2013-07-26
I have a Cisco ASA 5515 and a 2921 ISR that I have configured to receive netflow data from.  Both devices have been working perfectly for several months.  All of a sudden, both devices stopped sending netflow packets at about the same time.  I performed an #clear ip flow stats on the 2921, and it appears to be working again.  I can find no such command for the ASA.  I rebuilt the configuration for netflow on the ASA with no success.  Does netflow fill up the cache after a while and stop sending flows?  Is there any way to configure some kind of circular logging for such data?  Is there any way to clear the cache on the ASA appliance?
0
Comment
Question by:marrj
  • 2
2 Comments
 
LVL 17

Expert Comment

by:surbabu140977
ID: 39297140
flow-export destination inside <IP> <port>
flow-export delay flow-create 30
flow-export template timeout-rate 1

Then policy-map/class map your choice with ACL.

Please remember ASA will support only version 9. (in your collector check for version mismatch)

Most of the times it will be collector issue. Every collector won't work great with ASA. You might need to contact your collector vendor. But try using solarwinds  Orion NTA 3.5 SP2 demo for testing, if it's collecting data then problem is in the software.

Best,
0
 
LVL 17

Accepted Solution

by:
surbabu140977 earned 500 total points
ID: 39297162
Plixer also seem to support it. Test any one (solarwinds or plixer) to see if netflow data is actually coming or not. If not coming, asa is the issue, if coming- your collector is the issue.

http://www.plixer.com/blog/netflow/netflow-security-event-logging-with-the-cisco-asa/

Best,
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Tired of waiting for your show or movie to load?  Are buffering issues a constant problem with your internet connection?  Check this article out to see if these simple adjustments are the solution for you.
Shadow IT is coming out of the shadows as more businesses are choosing cloud-based applications. It is now a multi-cloud world for most organizations. Simultaneously, most businesses have yet to consolidate with one cloud provider or define an offic…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now