A few years back I had SolarWinds Real-Time NetFlow Analyzer working with my Cisco 3750x switch. Recently we had some suspicious traffic so I installed a new version of the software on a Win 10 machine. I can connect through the software to my switch, I can see all of the interfaces but none of them show NetFlow enabled. When I click on the interface I want to monitor then click "Start Flow Capture" I get a 'NetFlow is not detected on the selected interface'.
How do I get this port configured correctly to capture NetFlow data?
IOS version 15.0(2)SE6
Config on switch:
int gig <port to be monitored>
ip flow ingress
ip flow egress
ip flow-export source <port to be monitored>
ip flow-export version 5
ip flow-export destination <IP of my Win 10 machine> 2055
Per this thread- https://thwack.solarwinds.com/thread/20498
I tried to run the ip nbar protocol-discovery
and the ip route-cache flow
on the port to be monitored. Neither of those commands were accepted on that port.
Any help is appreciated.
I've had users on other forums attempt to help me by pointing me to towards flexible netflow configurations that use the command ip flow monitor <name of monitor> input
applied to the interface they want to monitor. My switch does not allow flexible netflow to be applied to non-service module ports. What I'm trying to monitor are the standard gigabit interfaces.
The netflow commands I can apply to those standard interfaces are those listed above: ip flow ingress
and ip flow egress
. How do I get netflow analysis that way?