New Question
 
 
PRTG Network Monitor

Intuitive to Use.
Easy to manage.

200.000 administrators have chosen PRTG to monitor their network. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free PRTG
Download >>

 

What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general. You are invited to get involved by asking and answering questions!

Learn more

 

Top Tags


View all Tags


Difference between show interface, RSPAN and Netflow v9

Votes:

0

Your Vote:

Up

Down

Hi,

I have connection scheme Cisco 6500 ---- Cisco 3925. I collec data from 6500 (RSPAN tx) and 3925 (Netflow ingress). Why Netflow values on 3925 differs from RSPAN 6500 and show interface command on 3925 (it`s same)?

Thanks.

cisco netflow rspan

Created on Feb 12, 2018 9:22:09 AM by  miha2000 (0) 1



6 Replies

Votes:

0

Your Vote:

Up

Down

Hi Miha2000

Are you comparing SNMP Traffic and Netflow data here by any chance? If not, could you provide graph screenshots so I can compare them?


Kind regards,
Stephan Linke, Tech Support Team

Created on Feb 12, 2018 7:35:26 PM by  Stephan Linke [Paessler Support]



Votes:

0

Your Vote:

Up

Down

Thanks for the screenshots. Are there any filters applied to the netflow sensor?

Created on Feb 13, 2018 1:12:18 PM by  Stephan Linke [Paessler Support]



Votes:

0

Your Vote:

Up

Down

Оnly time filter. If you about traffic type, it`s real. There is only esp.

Created on Feb 13, 2018 1:38:16 PM by  miha2000 (0) 1



Votes:

0

Your Vote:

Up

Down

Is sampling enabled in the netflow sensor or the target device?

Created on Feb 14, 2018 3:17:56 PM by  Stephan Linke [Paessler Support]



Votes:

0

Your Vote:

Up

Down

Sampling mode - off

Device Netflow configuration:
ip flow-cache timeout inactive 10
ip flow-cache timeout active 5
ip flow-export version 9
ip flow-export destination 10.50.11.130 9991

I thought it was because of `ip virtual-reassembly in`, but now I disable it.

Created on Feb 15, 2018 5:47:38 AM by  miha2000 (0) 1

Last change on Feb 15, 2018 2:36:22 PM by  Stephan Linke [Paessler Support]



Votes:

0

Your Vote:

Up

Down

Then the device may use flow templates PRTG does not understand correctly. Please use our Netflow Tester while the Flow Sensor is paused to see what kind of flow packets the device is sending. Post a screenshot after you let that run for a while. Thanks!


Kind regards,
Stephan Linke, Tech Support Team

Created on Feb 15, 2018 2:38:18 PM by  Stephan Linke [Paessler Support]



Please log in or register to enter your reply.


Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.