Are you able to see the individual packets via your collector/analyzer?
Perhaps you could get a hint.
There is a handy tool called 'analyze_netflow_packets' in the FlowViewer
distribution which will unpack each packet individually.
The distro can be found at flowviewer.net.
Best,
Joe
On 5/16/2021 3:34 AM, james list wrote:
Dear experts
I've a netflow configured on ASR1001X which is sending indeed udp packet to
collector but not displaying anything on the statistics, any idea why ?
Config:
flow exporter EXP_LOGS
destination 10.101.11.119
source Port-channel5.99 (this is the ip address used to send netflow
packets)
transport udp 2055
export-protocol netflow-v5
flow monitor MON_LOGS
exporter EXP_LOGS
record netflow ipv4 original-output
interface Port-channel5.7 (this is the interface where Netflow works)
ip flow monitor MON_LOGS sampler SAMPLER_1 output
sampler SAMPLER_1
mode random 1 out-of 1024
Here the statistics at zero, but indeed traffic is arriving to the Netflow
collector:
Flow Exporter EXP_LOGS:
Packet send statistics (last cleared 2d16h ago):
Successfully sent: 0 (0 bytes)
Client send statistics:
Client: Flow Monitor MON_LOG
Records added: 0
Bytes added: 0
Thanks in advance for any hint.
Cheers
James
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
