What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general.

Learn more

PRTG Network Monitor

Intuitive to Use. Easy to manage.
More than 500,000 users rely on Paessler PRTG every day. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free Download

Top Tags


View all Tags

Netflow Cisco 4431 cannot get to sensor

Votes:

1

Hi,

We currently use PRTG or monitoring and for some netflow. However we re trying to monitor a Cisco 4431 We have it in house to test before we roll it out to site, Im seeing the netflow stats output on the router using the

show flow monitor IPV4_monitor cache command

However cannot seem to get it to the output on the sensor. Below is my current config:

flow record P*****-FLOW-RECORD
 description record to monitor network traffic
 match ipv4 tos
 match ipv4 protocol
 match ipv4 source address
 match ipv4 destination address
 match transport source-port
 match transport destination-port
 match interface input
 match interface output
 collect routing source as
 collect routing destination as
 collect routing next-hop address ipv4
 collect transport tcp flags
 collect counter bytes
 collect counter packets
 collect timestamp sys-uptime first
 collect timestamp sys-uptime last
!
!
flow exporter IPV4_exporter
 description export Netflow traffic to CVD
 destination *.*.*.*
 source GigabitEthernet0/0/0
 transport udp 11206
 template data timeout 300
 option interface-table timeout 1000
 option exporter-stats timeout 1000
!
!
flow exporter IPV4_exporter2
 description export Netflow traffic to HQ
 destination 10.230.21.50
 transport udp 9997
 template data timeout 300
 option interface-table timeout 1000
 option exporter-stats timeout 1000
!
!
flow monitor IPV4_monitor
 description Used for ipv4 traffic analysis
 exporter IPV4_exporter
 statistics packet protocol
 record P*****-FLOW-RECORD
!
!
flow monitor IPV4_monitor2
 description Used for ipv4 traffic analysis
 exporter IPV4_exporter2
 statistics packet protocol
 record P*****-FLOW-RECORD
!
interface GigabitEthernet0/0/0                 (WAN)
 ip flow monitor IPV4_monitor input
 ip flow monitor IPV4_monitor output
!

interface GigabitEthernet0/0/1
ip flow monitor IPV4_monitor input

I cannot get anything to the reader for love nor money. Please can some advise?

cisco netflow-v9 prtg

Created on Oct 8, 2018 3:42:06 PM

Last change on Oct 9, 2018 6:45:29 AM by Stephan Linke [Paessler Support]



2 Replies

Votes:

0

Hi James,

Are you using the latest PRTG version (18.3.44.2054 as of today)? Since we had a bug in PRTG causing the sensors not to work properly. Please also ensure that flows are arriving (with the sensors being paused) via our NetFlow Tester.

PRTG Scheduler | PRTGapi | Feature Requests | WMI Issues | SNMP Issues

Kind regards,
Stephan Linke, Tech Support Team

Created on Oct 9, 2018 6:50:59 AM by Stephan Linke [Paessler Support]



Votes:

0

Hello dears,

I've a similar problem regarding the visibility of tcp flags and forwarding-status. I can see the fields that appear in the flow custom sensor how IP, Port, protocol, and others, but I didn't find an option to view the tcp flags and forwarding-status. can you help me?

on cisco 4000 series routers I can see the result perfectly on the output of the Show Flow monitor xxx cache commands. Here are the links to the respective RFCs: https://tools.ietf.org/html/rfc8803

https://www.rfc-editor.org/rfc/rfc7270.txt

Thanks, Fabrício

Created on Oct 21, 2020 1:00:36 AM




Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.