What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general.

Learn more

PRTG Network Monitor

Intuitive to Use. Easy to manage.
More than 500,000 users rely on Paessler PRTG every day. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free Download

Top Tags


View all Tags

NetFlow 9 - ASA 5512

Votes:

0

Hi

I had the Netflow tool up and running and it was working great and coming back with useful data. About 12 hours after in the small hours of the morning the data stopped. I refreshed, tried amending the time flow update interval and template timeout time but nada. I have used the Netflow tester and receive all template ID's of 285-256.

Nothing had been changed on the ASA since setting up NetFlow.

ciscoasa netflow netflowv9

Created on Jun 11, 2018 11:01:02 AM



3 Replies

Votes:

0

Hi,

Thank you for the Kb-Post! Please share the results from the Netflow Tester, as well as the following screenshots of the affected sensor (out of the PRTG AJAX Webinterface):

  • the "Overview" tab,
  • the "Log" tab,
  • the "Settings" tab (multiple screenshots if necessary to cover all options).

Please make sure the screenshots show the entire user interface, and aren't cropped. This should help to start debugging the issue.

best regards.

Created on Jun 12, 2018 10:38:51 AM by Torsten Lindner [Paessler Support]



Votes:

0

Okay I have went through the Netflow sensor and captured the images.

The port in use is 2055. I paused the sensor when using the tester to verify templates are received.

Overview https://pasteboard.co/HpyulDR.png

Log https://pasteboard.co/Hpyu3Yo.png

Settings1 https://pasteboard.co/HpyuEtP.png

Settings2 https://pasteboard.co/HpyuPlh.png

Settings3 https://pasteboard.co/HpyuYSn.png

Settings 4 https://pasteboard.co/Hpyv7Yl.png

NetFlow Test https://pasteboard.co/Hpyuvl1.png

Created on Jun 12, 2018 1:35:42 PM



Votes:

0

Thank you for the screenshots. While the settings of the sensor look correct, the flow data in the tester does not look good. It did receive template files, but no actual payload with traffic data (the empty "Decoded"-field). I can only recommend to check with Cisco then here.

Created on Jun 13, 2018 12:43:13 PM by Torsten Lindner [Paessler Support]




Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.