What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general.

Learn more

PRTG Network Monitor

Intuitive to Use. Easy to manage.
More than 500,000 users rely on Paessler PRTG every day. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free Download

Top Tags


View all Tags

PRTG NetFlow sensor stopped, can't get it working again

Votes:

0

I have/had a NetFlow v9 sensor setup to capture data from a customers Cisco router.

This was working but I needed to use it for an investigation last week and it was reporting no data received since September, I can still see historic data on the 365 day chart. No one is aware of any changes made to either Cisco or PRTG at this time but, frankly, it was a while ago and we can't be 100% sure.

I have attempted to resolve ths issue by doing the following.

1. verify the netflow data is being generated by Cisco.

Cisco was configured to export flow data on UDP port 12245. For testing purposes I have added a second exporter on UDP port 9996

ip flow-export source Vlan82 ip flow-export version 9 ip flow-export destination 192.168.50.2 9996 ip flow-export destination 192.168.50.2 12245 ip flow-top-talkers top 20 sort-by bytes cache-timeout 360 match destination address 0.0.0.0 0.0.0.0 !

With the PRTG service stopped (to free up the ports) both the free ManageEngine OP Netflow sensor and your own Paessler NetFlow tool show data being received on both ports. The ManageEngine sensor is correctly identifying top talkers and other flow data.

2. Check the remote probe

I have verified that the PRTG probe is listening on the UDP ports specified with "NETSTAT -a -n -o" which correctly displays the listening port associated with the PRTG process ID. These listening ports appear and disappear when I stop or start the probe service.

I have verified the configuration from the PRTG interface. I've created a duplicate Netflow sensor, so I have now one running on 12245 and one on 9996. Neither of these ports are showing data when I stop the PRTG sensor and start the ManageEngine one I have made sure that there are no port conflicts on the receiving probe server. I've uninstalled and resintalled the sensor

3. Test remote probe

Using the Paessler Netflow Generator I am generating test data to either/both ports, neither are showing any data on the PRTG interface (both are showing 'No data received since...').

Help

netflow-sensor prtg remote-probe

Created on Nov 2, 2016 9:25:46 AM



5 Replies

Votes:

0

Hello,

In order to find out if proper and compatible Netflow packets are arriving at the PRTG host, please use our Netflow Tester Please forward a screenshot or the logs from the Netflow Tester to us.

best regards.

Created on Nov 2, 2016 12:30:34 PM by Torsten Lindner [Paessler Support]



Votes:

0

Dumps as requested. Works for both output ports I mention.

You'll understand I've sanitised this somewhat. The xxx'd elements are valid IP's in the actual log files.

File : NF9Test_Templates-12245 257: 21(4) 22(4) 1(4) 2(4) 10(2) 14(2) 8(4) 12(4) 4(1) 5(1) 7(2) 11(2) 48(1) 51(1) 15(4) 13(1) 9(1) 6(1) 61(1) 256: 21(4) 22(4) 1(4) 2(4) 10(2) 14(2) 8(4) 12(4) 4(1) 5(1) 7(2) 11(2) 48(1) 51(1) 15(4) 13(1) 9(1) 6(1) 61(1) 17(2) 16(2)

File : NF9Test_Flows-12245 ID:256 - xx.xx.xxx.98:20507->xx.xx.xxx.xxx:42780 P:50 IF/OF:18/0 09:31:25 660 ID:256 - xx.xx.xxx.71:0->xx.xx.xxx.xxx:2048 P:1 IF/OF:18/0 09:32:10 60 ID:256 - 221.229.172.75:19639->xx.xx.xxx.xxx:22 P:6 IF/OF:18/22 09:32:11 179 ID:256 - 221.229.172.75:19639->192.168.50.7:22 P:6 IF/OF:18/22 09:32:11 179 ID:256 - 2.124.215.180:48202->xx.xx.xxx.xxx:23 P:6 IF/OF:18/0 09:32:14 44 ID:256 - xx.xx.xxx.98:500->xx.xx.xxx.xxx:500 P:17 IF/OF:18/0 09:32:15 280 ID:256 - xx.xx.xxx.xxx:31639->xx.xx.xxx.98:5700 P:50 IF/OF:10/18 09:31:59 3536 ID:256 - 192.168.50.2:60232->64.94.18.149:443 P:6 IF/OF:22/18 09:32:17 114 ID:256 - xx.xx.xxx.xxx:60232->64.94.18.149:443 P:6 IF/OF:22/18 09:32:17 114 ID:256 - 64.94.18.149:443->xx.xx.xxx.xxx:60232 P:6 IF/OF:18/22 09:32:17 74 ID:256 - 64.94.18.149:443->192.168.50.2:60232 P:6 IF/OF:18/22 09:32:17 74 ID:256 - 192.168.50.57:50903->216.58.204.46:443 P:6 IF/OF:22/18 09:32:17 41 ID:256 - xx.xx.xxx.xxx:50903->216.58.204.46:443 P:6 IF/OF:22/18 09:32:17 41 ID:256 - 216.58.204.46:443->xx.xx.xxx.xxx:50903 P:6 IF/OF:18/22 09:32:17 52 ID:256 - 216.58.204.46:443->192.168.50.57:50903 P:6 IF/OF:18/22 09:32:17 52 ID:256 - 192.168.50.119:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:12 3019 ID:256 - xx.xx.xxx.xxx:1026->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:12 3019 ID:256 - 185.54.168.126:5060->xx.xx.xxx.xxx:1026 P:17 IF/OF:18/0 09:32:12 3317 ID:256 - 192.168.50.158:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:21 32 ID:256 - xx.xx.xxx.xxx:1384->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:21 32 ID:256 - xx.xx.xxx.xxx:60370->185.54.168.126:443 P:6 IF/OF:22/18 09:31:13 57720 ID:256 - 185.54.168.126:443->xx.xx.xxx.xxx:60370 P:6 IF/OF:18/22 09:31:13 2598298 ID:256 - 185.54.168.126:443->192.168.50.51:60370 P:6 IF/OF:18/22 09:31:13 2598298 ID:256 - 192.168.50.158:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:01 32 ID:256 - xx.xx.xxx.xxx:1384->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:01 32 ID:256 - 192.168.50.22:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:51 2794 ID:256 - xx.xx.xxx.xxx:1094->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:51 2794 ID:256 - 185.54.168.126:5060->xx.xx.xxx.xxx:1094 P:17 IF/OF:18/0 09:31:51 3249 ID:256 - 192.168.50.2:38207->192.168.50.1:22 P:6 IF/OF:22/0 09:32:03 40 ID:256 - 185.54.168.126:5060->xx.xx.xxx.xxx:1095 P:17 IF/OF:18/0 09:32:07 596 ID:256 - 192.168.50.24:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:07 544 ID:256 - xx.xx.xxx.xxx:1095->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:07 544 ID:256 - 192.168.50.2:60232->64.94.18.149:443 P:6 IF/OF:22/18 09:31:47 114 ID:256 - xx.xx.xxx.xxx:60232->64.94.18.149:443 P:6 IF/OF:22/18 09:31:47 114 ID:256 - 64.94.18.149:443->xx.xx.xxx.xxx:60232 P:6 IF/OF:18/22 09:31:47 74 ID:256 - 64.94.18.149:443->192.168.50.2:60232 P:6 IF/OF:18/22 09:31:47 74 ID:256 - 192.168.50.2:1723->80.229.146.119:59611 P:6 IF/OF:22/0 09:31:49 60 ID:256 - 80.229.146.119:59611->xx.xx.xxx.xxx:1723 P:6 IF/OF:18/0 09:31:49 96 ID:256 - 192.168.50.57:50923->104.46.1.211:443 P:6 IF/OF:22/18 09:31:49 738 ID:256 - xx.xx.xxx.xxx:50923->104.46.1.211:443 P:6 IF/OF:22/18 09:31:49 738 ID:256 - 104.46.1.211:443->xx.xx.xxx.xxx:50923 P:6 IF/OF:18/22 09:31:49 805 ID:256 - 104.46.1.211:443->192.168.50.57:50923 P:6 IF/OF:18/22 09:31:49 805 ID:256 - 10.99.1.136:41685->10.168.50.2:445 P:6 IF/OF:20/22 09:31:52 41 ID:256 - 10.99.1.136:41685->192.168.50.2:445 P:6 IF/OF:20/22 09:31:52 41 ID:256 - 192.168.50.2:445->10.99.1.136:41685 P:6 IF/OF:22/20 09:31:52 52 ID:256 - 2.124.215.180:48202->xx.xx.xxx.xxx:23 P:6 IF/OF:18/0 09:31:42 88 ID:256 - 192.168.50.2:63229->8.8.8.8:53 P:17 IF/OF:22/0 09:31:53 70 ID:256 - 8.8.8.8:53->xx.xx.xxx.xxx:63229 P:17 IF/OF:18/0 09:31:53 159 ID:256 - 104.20.2.40:443->192.168.50.57:50925 P:6 IF/OF:18/22 09:31:53 1156 ID:256 - 192.168.50.2:0->xx.xx.xxx.xxx:771 P:1 IF/OF:22/0 09:31:09 4032 ID:256 - 192.168.50.57:50925->104.20.2.40:443 P:6 IF/OF:22/18 09:31:53 3304 ID:256 - xx.xx.xxx.xxx:50925->104.20.2.40:443 P:6 IF/OF:22/18 09:31:53 3304 ID:256 - 104.20.2.40:443->xx.xx.xxx.xxx:50925 P:6 IF/OF:18/22 09:31:53 1156 ID:256 - 192.168.50.21:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:51 2796 ID:256 - xx.xx.xxx.xxx:1027->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:51 2796 ID:256 - 185.54.168.126:5060->xx.xx.xxx.xxx:1027 P:17 IF/OF:18/0 09:31:51 3253 ID:256 - 192.168.50.7:22->221.229.172.75:19639 P:6 IF/OF:22/18 09:32:11 152 ID:256 - xx.xx.xxx.xxx:22->221.229.172.75:19639 P:6 IF/OF:22/18 09:32:11 152 ID:256 - 192.168.50.97:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:54 64 ID:256 - xx.xx.xxx.xxx:1033->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:54 64 ID:256 - 192.168.50.51:60370->185.54.168.126:443 P:6 IF/OF:22/18 09:31:13 57720 ID:256 - 192.168.50.2:63486->8.8.8.8:53 P:17 IF/OF:22/0 09:31:33 68 ID:256 - 8.8.8.8:53->xx.xx.xxx.xxx:63486 P:17 IF/OF:18/0 09:31:33 145 ID:256 - 192.168.50.97:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:14 8663 ID:256 - xx.xx.xxx.xxx:1033->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:14 8663 ID:256 - 185.54.168.126:5060->xx.xx.xxx.xxx:1033 P:17 IF/OF:18/0 09:31:15 11658 ID:256 - 192.168.50.57:50922->104.20.3.40:443 P:6 IF/OF:22/18 09:31:38 121 ID:256 - xx.xx.xxx.xxx:50922->104.20.3.40:443 P:6 IF/OF:22/18 09:31:38 121 ID:256 - 104.20.3.40:443->xx.xx.xxx.xxx:50922 P:6 IF/OF:18/22 09:31:53 40 ID:256 - 104.20.3.40:443->192.168.50.57:50922 P:6 IF/OF:18/22 09:31:53 40 ID:256 - 185.54.168.126:5060->xx.xx.xxx.xxx:1384 P:17 IF/OF:18/0 09:31:40 2280 ID:256 - 192.168.50.158:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:40 2468 ID:256 - xx.xx.xxx.xxx:1384->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:40 2468 ID:256 - xx.xx.xxx.71:0->xx.xx.xxx.xxx:2048 P:1 IF/OF:18/0 09:31:40 60 ID:256 - 10.99.1.136:41340->10.168.50.2:3389 P:6 IF/OF:20/22 09:30:57 41592 ID:256 - 10.99.1.136:41340->192.168.50.2:3389 P:6 IF/OF:20/22 09:30:57 41592 ID:256 - 192.168.50.2:3389->10.99.1.136:41340 P:6 IF/OF:22/20 09:30:57 124253 ID:256 - xx.xx.xxx.xxx:31639->xx.xx.xxx.98:5700 P:50 IF/OF:10/18 09:30:57 142720 ID:256 - 192.168.50.2:64462->192.168.50.1:53 P:17 IF/OF:22/0 09:31:25 65 ID:256 - 192.168.50.97:60551->148.251.246.99:80 P:6 IF/OF:22/18 09:31:40 1492 ID:256 - xx.xx.xxx.xxx:60551->148.251.246.99:80 P:6 IF/OF:22/18 09:31:40 1492 ID:256 - 148.251.246.99:80->xx.xx.xxx.xxx:60551 P:6 IF/OF:18/22 09:31:40 2619 ID:256 - 148.251.246.99:80->192.168.50.97:60551 P:6 IF/OF:18/22 09:31:40 2619 ID:256 - xx.xx.xxx.xxx:1026->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:27 510 ID:256 - 104.20.3.40:443->xx.xx.xxx.xxx:50922 P:6 IF/OF:18/22 09:31:38 155 ID:256 - 104.20.3.40:443->192.168.50.57:50922 P:6 IF/OF:18/22 09:31:38 155 ID:256 - 185.54.168.126:5060->xx.xx.xxx.xxx:1026 P:17 IF/OF:18/0 09:31:27 596 ID:256 - 192.168.50.119:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:27 510 ID:256 - 80.229.146.119:0->xx.xx.xxx.xxx:0 P:47 IF/OF:18/22 09:30:45 56449 ID:256 - 80.229.146.119:0->192.168.50.2:0 P:47 IF/OF:18/22 09:30:45 56449 ID:256 - 192.168.50.57:50923->104.46.1.211:443 P:6 IF/OF:22/18 09:31:00 8687 ID:256 - 192.168.50.2:64331->216.239.34.10:53 P:17 IF/OF:22/0 09:31:30 65 ID:256 - 216.239.34.10:53->xx.xx.xxx.xxx:64331 P:17 IF/OF:18/0 09:31:30 105 ID:256 - xx.xx.xxx.xxx:50923->104.46.1.211:443 P:6 IF/OF:22/18 09:31:00 8687 ID:256 - 104.46.1.211:443->xx.xx.xxx.xxx:50923 P:6 IF/OF:18/22 09:31:00 12922 ID:256 - 104.46.1.211:443->192.168.50.57:50923 P:6 IF/OF:18/22 09:31:00 12922 ID:256 - 192.168.50.2:0->80.229.146.119:0 P:47 IF/OF:22/18 09:30:45 1447632 ID:256 - xx.xx.xxx.xxx:0->80.229.146.119:0 P:47 IF/OF:22/18 09:30:45 1447632 ID:256 - 104.209.190.8:443->xx.xx.xxx.xxx:50924 P:6 IF/OF:18/22 09:31:01 12037 ID:256 - 104.209.190.8:443->192.168.50.57:50924 P:6 IF/OF:18/22 09:31:01 12037 ID:256 - 192.168.50.2:57365->255.255.255.255:51515 P:17 IF/OF:22/0 09:30:46 1056 ID:256 - xx.xx.xxx.xxx:50903->216.58.204.46:443 P:6 IF/OF:22/18 09:31:32 41 ID:256 - 216.58.204.46:443->xx.xx.xxx.xxx:50903 P:6 IF/OF:18/22 09:31:32 52 ID:256 - 216.58.204.46:443->192.168.50.57:50903 P:6 IF/OF:18/22 09:31:32 52 ID:256 - 192.168.50.57:50924->104.209.190.8:443 P:6 IF/OF:22/18 09:31:01 7447 ID:256 - xx.xx.xxx.xxx:50924->104.209.190.8:443 P:6 IF/OF:22/18 09:31:01 7447 ID:256 - 192.168.50.57:50903->216.58.204.46:443 P:6 IF/OF:22/18 09:31:32 41 ID:256 - 185.54.168.126:443->192.168.50.51:60360 P:6 IF/OF:18/22 09:31:13 40 ID:256 - 185.54.168.126:443->xx.xx.xxx.xxx:60364 P:6 IF/OF:18/22 09:31:13 40 ID:256 - 185.54.168.126:443->192.168.50.51:60364 P:6 IF/OF:18/22 09:31:13 40 ID:256 - 185.54.168.126:443->xx.xx.xxx.xxx:60365 P:6 IF/OF:18/22 09:31:13 40 ID:256 - 185.54.168.126:443->192.168.50.51:60365 P:6 IF/OF:18/22 09:31:13 40 ID:256 - 185.54.168.126:443->xx.xx.xxx.xxx:60361 P:6 IF/OF:18/22 09:31:13 40 ID:256 - 185.54.168.126:443->192.168.50.51:60361 P:6 IF/OF:18/22 09:31:13 40 ID:256 - xx.xx.xxx.xxx:60232->64.94.18.149:443 P:6 IF/OF:22/18 09:31:17 114 ID:256 - 64.94.18.149:443->xx.xx.xxx.xxx:60232 P:6 IF/OF:18/22 09:31:17 74 ID:256 - 64.94.18.149:443->192.168.50.2:60232 P:6 IF/OF:18/22 09:31:17 74 ID:256 - 192.168.50.2:60232->64.94.18.149:443 P:6 IF/OF:22/18 09:31:17 114 ID:256 - 192.168.50.2:59292->209.10.120.35:80 P:6 IF/OF:22/18 09:31:33 885 ID:256 - xx.xx.xxx.xxx:59292->209.10.120.35:80 P:6 IF/OF:22/18 09:31:33 885 ID:256 - 209.10.120.35:80->xx.xx.xxx.xxx:59292 P:6 IF/OF:18/22 09:31:33 952 ID:256 - 209.10.120.35:80->192.168.50.2:59292 P:6 IF/OF:18/22 09:31:33 952 ID:256 - 192.168.50.2:445->10.99.1.136:41685 P:6 IF/OF:22/20 09:31:22 52 ID:256 - 192.168.50.2:55134->239.255.255.250:1900 P:17 IF/OF:22/0 09:31:19 804 ID:256 - 10.99.1.136:41685->10.168.50.2:445 P:6 IF/OF:20/22 09:31:22 41 ID:256 - 10.99.1.136:41685->192.168.50.2:445 P:6 IF/OF:20/22 09:31:22 41 ID:256 - 192.168.50.158:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:23 32 ID:256 - xx.xx.xxx.xxx:1384->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:23 32 ID:256 - 221.229.172.75:24147->xx.xx.xxx.xxx:22 P:6 IF/OF:18/22 09:31:38 307 ID:256 - 221.229.172.75:24147->192.168.50.7:22 P:6 IF/OF:18/22 09:31:38 307 ID:256 - 192.168.50.7:22->221.229.172.75:24147 P:6 IF/OF:22/18 09:31:38 232 ID:256 - xx.xx.xxx.xxx:22->221.229.172.75:24147 P:6 IF/OF:22/18 09:31:38 232 ID:256 - 192.168.50.2:63399->8.8.8.8:53 P:17 IF/OF:22/0 09:31:05 68 ID:256 - 8.8.8.8:53->xx.xx.xxx.xxx:63399 P:17 IF/OF:18/0 09:31:05 193 ID:256 - 192.168.50.2:65117->8.8.8.8:53 P:17 IF/OF:22/0 09:31:05 68 ID:256 - 8.8.8.8:53->xx.xx.xxx.xxx:65117 P:17 IF/OF:18/0 09:31:05 193 ID:256 - 192.168.50.6:123->78.129.190.21:123 P:17 IF/OF:22/18 09:31:05 76 ID:256 - xx.xx.xxx.xxx:123->78.129.190.21:123 P:17 IF/OF:22/18 09:31:05 76 ID:256 - 78.129.190.21:123->xx.xx.xxx.xxx:123 P:17 IF/OF:18/22 09:31:05 76 ID:256 - 78.129.190.21:123->192.168.50.6:123 P:17 IF/OF:18/22 09:31:05 76 ID:256 - 192.168.50.2:3389->97.87.253.178:61778 P:6 IF/OF:22/18 09:31:05 2039 ID:256 - xx.xx.xxx.xxx:3389->97.87.253.178:61778 P:6 IF/OF:22/18 09:31:05 2039 ID:256 - 185.54.168.126:5060->xx.xx.xxx.xxx:1094 P:17 IF/OF:18/0 09:31:06 596 ID:256 - 192.168.50.22:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:06 544 ID:256 - xx.xx.xxx.xxx:1094->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:06 544 ID:256 - 185.54.168.126:5060->xx.xx.xxx.xxx:1027 P:17 IF/OF:18/0 09:31:06 596 ID:256 - 192.168.50.21:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:06 544 ID:256 - xx.xx.xxx.xxx:1027->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:06 544 ID:256 - xx.xx.xxx.98:20507->xx.xx.xxx.xxx:42780 P:50 IF/OF:18/0 09:30:24 840 ID:256 - xx.xx.xxx.71:0->xx.xx.xxx.xxx:2048 P:1 IF/OF:18/0 09:31:10 60 ID:256 - 192.168.50.24:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:07 2793 ID:256 - xx.xx.xxx.xxx:1095->185.54.168.126:5060 P:17 IF/OF:22/18 09:31:07 2793 ID:256 - 185.54.168.126:5060->xx.xx.xxx.xxx:1095 P:17 IF/OF:18/0 09:31:07 3249 ID:256 - 37.122.210.134:123->xx.xx.xxx.xxx:31 P:17 IF/OF:18/0 09:31:11 76 ID:256 - 2.124.215.180:48202->xx.xx.xxx.xxx:23 P:6 IF/OF:18/0 09:31:11 44 ID:256 - 192.168.50.57:54255->239.255.255.250:1900 P:17 IF/OF:22/0 09:31:09 804 ID:256 - 185.54.168.126:443->xx.xx.xxx.xxx:60363 P:6 IF/OF:18/22 09:31:13 40 ID:256 - 185.54.168.126:443->192.168.50.51:60363 P:6 IF/OF:18/22 09:31:13 40 ID:256 - 185.54.168.126:443->xx.xx.xxx.xxx:60362 P:6 IF/OF:18/22 09:31:13 40 ID:256 - 185.54.168.126:443->192.168.50.51:60362 P:6 IF/OF:18/22 09:31:13 40 ID:256 - 185.54.168.126:443->xx.xx.xxx.xxx:60360 P:6 IF/OF:18/22 09:31:13 40 ID:256 - 192.168.50.2:445->10.99.1.136:41685 P:6 IF/OF:22/20 09:32:19 93 ID:256 - 10.99.1.136:41685->10.168.50.2:445 P:6 IF/OF:20/22 09:32:19 93 ID:256 - 10.99.1.136:41685->192.168.50.2:445 P:6 IF/OF:20/22 09:32:19 93 ID:256 - 104.20.2.40:443->xx.xx.xxx.xxx:50925 P:6 IF/OF:18/22 09:32:39 155 ID:256 - 104.20.2.40:443->192.168.50.57:50925 P:6 IF/OF:18/22 09:32:39 155 ID:256 - 141.212.122.43:60108->xx.xx.xxx.xxx:102 P:6 IF/OF:18/0 09:32:28 40 ID:256 - 185.54.168.126:5060->xx.xx.xxx.xxx:1033 P:17 IF/OF:18/0 09:32:30 1704 ID:256 - 221.229.172.75:17203->xx.xx.xxx.xxx:22 P:6 IF/OF:18/22 09:32:45 307 ID:256 - 221.229.172.75:17203->192.168.50.7:22 P:6 IF/OF:18/22 09:32:45 307 ID:256 - 192.168.50.7:22->221.229.172.75:17203 P:6 IF/OF:22/18 09:32:45 232 ID:256 - xx.xx.xxx.xxx:22->221.229.172.75:17203 P:6 IF/OF:22/18 09:32:45 232 ID:256 - 192.168.50.2:0->80.229.146.119:0 P:47 IF/OF:22/18 09:31:46 2146682 ID:256 - xx.xx.xxx.xxx:0->80.229.146.119:0 P:47 IF/OF:22/18 09:31:46 2146682 ID:256 - 80.229.146.119:0->xx.xx.xxx.xxx:0 P:47 IF/OF:18/22 09:31:46 78842 ID:256 - 80.229.146.119:0->192.168.50.2:0 P:47 IF/OF:18/22 09:31:46 78842 ID:256 - 192.168.50.97:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:14 1944 ID:256 - xx.xx.xxx.xxx:1033->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:14 1944 ID:256 - 192.168.50.2:57365->255.255.255.255:51515 P:17 IF/OF:22/0 09:31:52 1056 ID:256 - 192.168.50.57:50924->104.209.190.8:443 P:6 IF/OF:22/18 09:32:51 40 ID:256 - xx.xx.xxx.xxx:50924->104.209.190.8:443 P:6 IF/OF:22/18 09:32:51 40 ID:256 - 192.168.50.57:50923->104.46.1.211:443 P:6 IF/OF:22/18 09:32:51 40 ID:256 - xx.xx.xxx.xxx:50923->104.46.1.211:443 P:6 IF/OF:22/18 09:32:51 40 ID:256 - 192.168.50.2:443->85.255.234.71:49466 P:6 IF/OF:22/18 09:32:51 253 ID:256 - xx.xx.xxx.xxx:443->85.255.234.71:49466 P:6 IF/OF:22/18 09:32:51 253 ID:256 - 85.255.234.71:49466->xx.xx.xxx.xxx:443 P:6 IF/OF:18/22 09:32:51 40 ID:256 - 85.255.234.71:49466->192.168.50.2:443 P:6 IF/OF:18/22 09:32:51 40 ID:256 - 192.168.50.2:63845->8.8.8.8:53 P:17 IF/OF:22/0 09:32:38 61 ID:256 - 8.8.8.8:53->xx.xx.xxx.xxx:63845 P:17 IF/OF:18/0 09:32:38 77 ID:256 - 192.168.50.2:64616->192.168.50.1:53 P:17 IF/OF:22/0 09:32:38 61 ID:256 - 192.168.50.57:50925->104.20.2.40:443 P:6 IF/OF:22/18 09:32:39 121 ID:256 - 104.20.2.40:443->xx.xx.xxx.xxx:50925 P:6 IF/OF:18/22 09:32:53 40 ID:256 - 104.20.2.40:443->192.168.50.57:50925 P:6 IF/OF:18/22 09:32:53 40 ID:256 - xx.xx.xxx.xxx:50925->104.20.2.40:443 P:6 IF/OF:22/18 09:32:39 121 ID:256 - xx.xx.xxx.71:0->xx.xx.xxx.xxx:2048 P:1 IF/OF:18/0 09:32:40 60 ID:256 - xx.xx.xxx.xxx:60370->185.54.168.126:443 P:6 IF/OF:22/18 09:32:14 19300 ID:256 - 185.54.168.126:443->xx.xx.xxx.xxx:60370 P:6 IF/OF:18/22 09:32:14 892877 ID:256 - 185.54.168.126:443->192.168.50.51:60370 P:6 IF/OF:18/22 09:32:14 892877 ID:256 - 192.168.50.51:60370->185.54.168.126:443 P:6 IF/OF:22/18 09:32:14 19300 ID:256 - 10.99.1.136:41340->192.168.50.2:3389 P:6 IF/OF:20/22 09:31:58 2800 ID:256 - 10.99.1.136:41340->10.168.50.2:3389 P:6 IF/OF:20/22 09:31:58 2800 ID:256 - 192.168.50.2:3389->10.99.1.136:41340 P:6 IF/OF:22/20 09:31:59 9310 ID:256 - 192.168.50.2:65444->198.41.0.4:53 P:17 IF/OF:22/0 09:32:44 61 ID:256 - 198.41.0.4:53->xx.xx.xxx.xxx:65444 P:17 IF/OF:18/0 09:32:44 521 ID:256 - xx.xx.xxx.98:500->xx.xx.xxx.xxx:500 P:17 IF/OF:18/0 09:32:45 96 ID:256 - 192.168.50.2:60232->64.94.18.149:443 P:6 IF/OF:22/18 09:32:47 114 ID:256 - xx.xx.xxx.xxx:60232->64.94.18.149:443 P:6 IF/OF:22/18 09:32:47 114 ID:256 - 64.94.18.149:443->xx.xx.xxx.xxx:60232 P:6 IF/OF:18/22 09:32:47 74 ID:256 - 64.94.18.149:443->192.168.50.2:60232 P:6 IF/OF:18/22 09:32:47 74 ID:256 - xx.xx.xxx.xxx:443->80.229.146.119:60372 P:6 IF/OF:22/18 09:32:03 67316 ID:256 - 192.168.50.2:1723->80.229.146.119:59611 P:6 IF/OF:22/0 09:32:49 60 ID:256 - 80.229.146.119:60372->xx.xx.xxx.xxx:443 P:6 IF/OF:18/22 09:32:03 84848 ID:256 - 80.229.146.119:60372->192.168.50.2:443 P:6 IF/OF:18/22 09:32:03 84848 ID:256 - 192.168.50.2:443->80.229.146.119:60372 P:6 IF/OF:22/18 09:32:03 67316 ID:256 - 80.229.146.119:59611->xx.xx.xxx.xxx:1723 P:6 IF/OF:18/0 09:32:49 96 ID:256 - 185.54.168.126:5060->xx.xx.xxx.xxx:1094 P:17 IF/OF:18/0 09:32:51 596 ID:256 - 192.168.50.22:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:51 543 ID:256 - xx.xx.xxx.xxx:1094->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:51 543 ID:256 - 185.54.168.126:5060->xx.xx.xxx.xxx:1027 P:17 IF/OF:18/0 09:32:51 596 ID:256 - 192.168.50.21:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:51 544 ID:256 - xx.xx.xxx.xxx:1027->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:51 544 ID:256 - 85.255.234.71:52790->xx.xx.xxx.xxx:443 P:6 IF/OF:18/22 09:32:50 1180 ID:256 - 85.255.234.71:52790->192.168.50.2:443 P:6 IF/OF:18/22 09:32:50 1180 ID:256 - 10.99.1.136:41685->10.168.50.2:445 P:6 IF/OF:20/22 09:32:52 41 ID:256 - 10.99.1.136:41685->192.168.50.2:445 P:6 IF/OF:20/22 09:32:52 41 ID:256 - 192.168.50.2:445->10.99.1.136:41685 P:6 IF/OF:22/20 09:32:52 52 ID:256 - 192.168.50.2:443->85.255.234.71:52790 P:6 IF/OF:22/18 09:32:50 409 ID:256 - xx.xx.xxx.xxx:443->85.255.234.71:52790 P:6 IF/OF:22/18 09:32:50 409 ID:256 - 192.168.50.57:50927->104.20.2.40:443 P:6 IF/OF:22/18 09:32:53 3304 ID:256 - xx.xx.xxx.xxx:50927->104.20.2.40:443 P:6 IF/OF:22/18 09:32:53 3304 ID:256 - 104.20.2.40:443->xx.xx.xxx.xxx:50927 P:6 IF/OF:18/22 09:32:53 1156 ID:256 - 104.20.2.40:443->192.168.50.57:50927 P:6 IF/OF:18/22 09:32:53 1156 ID:256 - 89.151.171.223:55544->xx.xx.xxx.xxx:23 P:6 IF/OF:18/0 09:32:54 40 ID:256 - 192.168.50.97:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:50 64 ID:256 - xx.xx.xxx.xxx:1033->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:50 64 ID:256 - 192.168.50.2:59303->93.184.217.17:80 P:6 IF/OF:22/18 09:33:11 368 ID:256 - xx.xx.xxx.xxx:59303->93.184.217.17:80 P:6 IF/OF:22/18 09:33:11 368 ID:256 - 93.184.217.17:80->xx.xx.xxx.xxx:59303 P:6 IF/OF:18/22 09:33:11 359 ID:256 - 93.184.217.17:80->192.168.50.2:59303 P:6 IF/OF:18/22 09:33:11 359 ID:256 - 192.168.50.2:59304->93.184.217.17:80 P:6 IF/OF:22/18 09:33:11 368 ID:256 - xx.xx.xxx.xxx:59304->93.184.217.17:80 P:6 IF/OF:22/18 09:33:11 368 ID:256 - 93.184.217.17:80->xx.xx.xxx.xxx:59304 P:6 IF/OF:18/22 09:33:11 359 ID:256 - 93.184.217.17:80->192.168.50.2:59304 P:6 IF/OF:18/22 09:33:11 359 ID:256 - 185.54.168.126:443->xx.xx.xxx.xxx:60370 P:6 IF/OF:18/22 09:33:11 111 ID:256 - 185.54.168.126:443->192.168.50.51:60370 P:6 IF/OF:18/22 09:33:11 111 ID:256 - 192.168.50.51:60370->185.54.168.126:443 P:6 IF/OF:22/18 09:33:11 80 ID:256 - xx.xx.xxx.xxx:60370->185.54.168.126:443 P:6 IF/OF:22/18 09:33:11 80 ID:256 - 192.168.50.2:0->xx.xx.xxx.xxx:771 P:1 IF/OF:22/0 09:32:14 3456 ID:256 - xx.xx.xxx.xxx:50184->xx.xx.xxx.98:10719 P:50 IF/OF:10/18 09:32:16 62272 ID:256 - xx.xx.xxx.98:11821->xx.xx.xxx.xxx:22137 P:50 IF/OF:18/0 09:32:16 780 ID:256 - 192.168.50.24:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:52 2794 ID:256 - xx.xx.xxx.xxx:1095->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:52 2794 ID:256 - 185.54.168.126:5060->xx.xx.xxx.xxx:1095 P:17 IF/OF:18/0 09:32:52 3249 ID:256 - 192.168.50.57:50903->216.58.204.46:443 P:6 IF/OF:22/18 09:33:02 121 ID:256 - xx.xx.xxx.xxx:50903->216.58.204.46:443 P:6 IF/OF:22/18 09:33:02 121 ID:256 - 216.58.204.46:443->xx.xx.xxx.xxx:50903 P:6 IF/OF:18/22 09:33:02 227 ID:256 - 216.58.204.46:443->192.168.50.57:50903 P:6 IF/OF:18/22 09:33:02 227 ID:256 - 192.168.50.2:38207->192.168.50.1:22 P:6 IF/OF:22/0 09:33:03 40 ID:256 - 192.168.50.57:68->255.255.255.255:67 P:17 IF/OF:22/0 09:33:03 328 ID:256 - 192.168.50.57:137->192.168.50.255:137 P:17 IF/OF:22/0 09:32:55 702 ID:256 - 192.168.50.7:22->221.229.172.75:63960 P:6 IF/OF:22/18 09:33:19 152 ID:256 - xx.xx.xxx.xxx:22->221.229.172.75:63960 P:6 IF/OF:22/18 09:33:19 152 ID:256 - 185.54.168.126:5060->xx.xx.xxx.xxx:1384 P:17 IF/OF:18/0 09:32:40 15488 ID:256 - 192.168.50.158:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:40 11444 ID:256 - xx.xx.xxx.xxx:1384->185.54.168.126:5060 P:17 IF/OF:22/18 09:32:40 11444 ID:256 - 192.168.50.2:63589->192.168.50.1:53 P:17 IF/OF:22/0 09:33:09 62 ID:256 - 192.168.50.2:64981->8.8.8.8:53 P:17 IF/OF:22/0 09:33:09 70 ID:256 - 192.168.50.2:64627->192.168.50.1:53 P:17 IF/OF:22/0 09:33:09 60 ID:256 - 8.8.8.8:53->xx.xx.xxx.xxx:64981 P:17 IF/OF:18/0 09:33:09 115 ID:256 - 192.168.50.2:63818->192.168.50.1:53 P:17 IF/OF:22/0 09:33:09 60 ID:256 - 192.168.50.2:65046->8.8.8.8:53 P:17 IF/OF:22/0 09:33:10 61 ID:256 - 8.8.8.8:53->xx.xx.xxx.xxx:65046 P:17 IF/OF:18/0 09:33:10 111 ID:256 - xx.xx.xxx.71:0->xx.xx.xxx.xxx:2048 P:1 IF/OF:18/0 09:33:10 60 ID:256 - 192.168.50.57:50114->239.255.255.250:1900 P:17 IF/OF:22/0 09:32:56 966 ID:256 - 192.168.50.2:63550->8.8.8.8:53 P:17 IF/OF:22/0 09:33:11 62 ID:256 - 8.8.8.8:53->xx.xx.xxx.xxx:63550 P:17 IF/OF:18/0 09:33:11 78 ID:256 - 192.168.50.57:64947->224.0.1.60:427 P:17 IF/OF:22/0 09:33:12 72 ID:256 - 192.168.50.2:63958->8.8.8.8:53 P:17 IF/OF:22/0 09:33:12 57 ID:256 - 8.8.8.8:53->xx.xx.xxx.xxx:63958 P:17 IF/OF:18/0 09:33:12 102 ID:256 - 192.168.50.2:63577->8.8.8.8:53 P:17 IF/OF:22/0 09:33:12 59 ID:256 - 8.8.8.8:53->xx.xx.xxx.xxx:63577 P:17 IF/OF:18/0 09:33:12 120 ID:256 - 185.54.168.126:5060->xx.xx.xxx.xxx:1026 P:17 IF/OF:18/0 09:33:12 596 ID:256 - 192.168.50.119:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:33:12 510 ID:256 - xx.xx.xxx.xxx:1026->185.54.168.126:5060 P:17 IF/OF:22/18 09:33:12 510 ID:256 - 192.168.50.2:65013->8.8.8.8:53 P:17 IF/OF:22/0 09:33:13 70 ID:256 - 192.168.50.57:64946->239.255.255.250:1900 P:17 IF/OF:22/0 09:33:09 804 ID:256 - 8.8.8.8:53->xx.xx.xxx.xxx:65013 P:17 IF/OF:18/0 09:33:13 112 ID:256 - 185.54.168.126:443->xx.xx.xxx.xxx:60370 P:6 IF/OF:18/22 09:33:13 40 ID:256 - 185.54.168.126:443->192.168.50.51:60370 P:6 IF/OF:18/22 09:33:13 40 ID:256 - 192.168.50.2:64337->8.8.8.8:53 P:17 IF/OF:22/0 09:33:13 76 ID:256 - 192.168.50.2:63618->8.8.8.8:53 P:17 IF/OF:22/0 09:33:13 64 ID:256 - 64.94.18.149:443->192.168.50.2:60232 P:6 IF/OF:18/22 09:33:17 74 ID:256 - 2.124.215.180:48202->xx.xx.xxx.xxx:23 P:6 IF/OF:18/0 09:33:18 44 ID:256 - 192.168.50.2:49282->8.8.8.8:53 P:17 IF/OF:22/0 09:33:18 82 ID:256 - 8.8.8.8:53->xx.xx.xxx.xxx:49282 P:17 IF/OF:18/0 09:33:18 131 ID:256 - 192.168.50.2:65191->8.8.8.8:53 P:17 IF/OF:22/0 09:33:19 64 ID:256 - 221.229.172.75:63960->xx.xx.xxx.xxx:22 P:6 IF/OF:18/22 09:33:19 179 ID:256 - 221.229.172.75:63960->192.168.50.7:22 P:6 IF/OF:18/22 09:33:19 179 ID:256 - 8.8.8.8:53->xx.xx.xxx.xxx:65191 P:17 IF/OF:18/0 09:33:19 210 ID:256 - 192.168.50.2:64328->8.8.8.8:53 P:17 IF/OF:22/0 09:33:19 70 ID:256 - 192.168.50.2:65266->8.8.8.8:53 P:17 IF/OF:22/0 09:33:19 82 ID:256 - 8.8.8.8:53->xx.xx.xxx.xxx:64328 P:17 IF/OF:18/0 09:33:19 120 ID:256 - 8.8.8.8:53->xx.xx.xxx.xxx:65266 P:17 IF/OF:18/0 09:33:19 131 ID:256 - 192.168.50.2:65231->8.8.8.8:53 P:17 IF/OF:22/0 09:33:19 75 ID:256 - 8.8.8.8:53->xx.xx.xxx.xxx:65231 P:17 IF/OF:18/0 09:33:19 131 ID:256 - 192.168.50.2:65075->8.8.8.8:53 P:17 IF/OF:22/0 09:33:19 71 ID:256 - 8.8.8.8:53->xx.xx.xxx.xxx:65075 P:17 IF/OF:18/0 09:33:19 127 ID:256 - 192.168.50.2:65423->216.239.38.10:53 P:17 IF/OF:22/0 09:33:20 61 ID:256 - 216.239.38.10:53->xx.xx.xxx.xxx:65423 P:17 IF/OF:18/0 09:33:20 77 ID:256 - 10.99.1.136:41685->10.168.50.2:445 P:6 IF/OF:20/22 09:33:22 41 ID:256 - 10.99.1.136:41685->192.168.50.2:445 P:6 IF/OF:20/22 09:33:22 41 ID:256 - 192.168.50.2:445->10.99.1.136:41685 P:6 IF/OF:22/20 09:33:22 52 ID:256 - 192.168.50.2:51862->239.255.255.250:1900 P:17 IF/OF:22/0 09:33:19 804 ID:256 - 192.168.50.158:5060->185.54.168.126:5060 P:17 IF/OF:22/18 09:33:27 32 ID:256 - xx.xx.xxx.xxx:1384->185.54.168.126:5060 P:17 IF/OF:22/18 09:33:27 32 ID:256 - 104.20.2.40:443->xx.xx.xxx.xxx:50927 P:6 IF/OF:18/22 09:33:39 155 ID:256 - 104.20.2.40:443->192.168.50.57:50927 P:6 IF/OF:18/22 09:33:39 155

Created on Nov 2, 2016 12:43:21 PM



Votes:

0

The test indeed looks okay. Can you send us some screenshots showing the Tester, when running, as well as the full settings of the Flow-Sensors in PRTG? You can send them via email to [email protected] with reference to this KB-Thread.

Created on Nov 3, 2016 10:12:45 AM by Torsten Lindner [Paessler Support]



Votes:

0

Solution found.

Mainly my stupidity. However the issue was found to be that the PRTG NetFlow sensor was set to with a Sender IP of the internal IP of the router. The Paessler NetFlow tester showed that the IP that was generating the NetFlow data was the external IP of the Router, as we had the the exporter configured on the External interface of the router.

I cleared the Sender IP in the PRTG sensor so it showed blank and data started arriving.

Makes sense now I think about it!

Created on Nov 3, 2016 10:36:48 AM



Votes:

0

Thanks for the follow up on the case. I'm glad this could be solved. Have a great day!

Created on Nov 3, 2016 11:30:50 AM by Torsten Lindner [Paessler Support]




Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.