What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general.

Learn more

PRTG Network Monitor

Intuitive to Use. Easy to manage.
More than 500,000 users rely on Paessler PRTG every day. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free Download

Top Tags


View all Tags

Zero values in Neflow V9 sensor toplist.

Votes:

0

We installed Flexible NetFlow V9 on our router(Cisco 877 with recent IOS) which is running VPN IPsec. We inputted the important configuration that would export the traffic which was monitored to the PRTG. When we view the cache flow in the router, data is populated in the Source IP,Destination IP, Source Port, Destination Port, Protocol and Bytes columns. We installed the NetFlow V9 sensor on our PRTG server and inputted the configuration settings that would connect the router and the PRTG. When we view the toplist option for the sensor, it shows data in the Source IP, Destination IP and the Bytes columns but all zeros value is populated for the Source Port, Destination Port, Protocol .These zero value did not show in the cache in the router( i.e. the router is showing the actual associated ports for the traffic and the protocol). A screenshot of the result is shown below for the PRTG toplist .

We have tried resetting the router several times but get the same results. What would be your recommended router configuration and your recommended PRTG settings.? Do you know if there is any Known Issues with regards to only 0s showing up for the port and protocol columns.

prtg snmp wmi

Created on Oct 18, 2012 5:58:42 PM



3 Replies

Votes:

0

Hello,

PRTG uses what-ever data it gets via Netflow packets. So PRTG does of course not replace the Port- and protocol-numbers with 0s, these are already that way in the Netflow Packets.

I'm afraid we only have the following configuration tips for Cisco devices: https://kb.paessler.com/knowledgebase/en/topic/563-do-you-have-any-configuration-tips-for-cisco-routers-and-prtg

best regards.

Created on Oct 19, 2012 3:10:05 PM by Torsten Lindner [Paessler Support]



Votes:

0

If it use the same value in the router cache why does it give zero values in the PRTG?? Does some kind of encryption happen to the data over VPN IPsec so that the PRTG cant interpret the data accurate???

Created on Nov 11, 2012 5:41:24 AM



Votes:

0

There is no encryption or decryption going on in PRTG. PRTG will write what ever port numbers are mentioned in the netflow packets. So the 0-port numbers are already in the Netflow Packets, or it is traffic that has no ports (like for example a Ping does not target a port). So this is an issue outside of PRTG (either router configuration, or it's the traffic itself).

Created on Nov 12, 2012 10:23:44 AM by Torsten Lindner [Paessler Support]




Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.