Hello All,
Just looking for a confirmation if a Cisco WS-C3560X-48P (Cisco C3560X) with a C3KX-NM-1G (FRULink 1G Module) will export Flexible NetFlow or NetFlow records?
Cisco IOS Software, C3560E Software (C3560E-UNIVERSALK9-M), Version 15.0(2)SE4, RELEASE SOFTWARE (fc1)
Here is the Running Config:
I did both methods neither show traffic?
ip flow-egress input-interface
ip flow-cache timeout active 15
ip flow-export source GigabitEthernet0/48
ip flow-export version 9
ip flow-export destination 10.x.x.x 2055
#show ip flow interface
Vlan254
ip flow ingress
ip flow egress
GigabitEthernet0/48
ip flow ingress
ip flow egress
GigabitEthernet1/1
ip flow ingress
ip flow egress
#show ip flow export
Flow export v9 is enabled for main cache
Export source and destination details :
VRF ID : Default
Source(1) 10.180.175.1 (GigabitEthernet0/48)
Destination(1) 10.15.254.22 (2055)
Version 9 flow records
0 flows exported in 0 udp datagrams
0 flows failed due to lack of export packet
0 export packets were sent up to process level
NOTE: I an unable to assign the Monitor to any phy or vlan interfaces:
(config-if)#ip flow monitor NetFlowMonitor input
% Flow Monitor: 'NetFlowMonitor' could not be added.
Per: SolarWinds Knowledge Base :: Required flow template fields
flow record SolarWinds
description Solarwinds Flow Template
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input physical snmp
match interface output physical snmp
collect counter bytes
collect counter packets
flow exporter NTA
destination 10.x.x.x
source GigabitEthernet0/48
transport udp 2055
export-protocol netflow-v5
option interface-table
option exporter-stats
flow monitor NetFlowMonitor
record SolarWinds
exporter NTA
#show flow exporter
Flow Exporter NTA:
Export protocol: NetFlow Version 5
Transport Configuration:
Destination IP address: 10.x.x.x
Source IP address: 10.y.y.y
Source Interface: GigabitEthernet0/48
Transport Protocol: UDP
Destination Port: 2055
Source Port: 53509
DSCP: 0x0
TTL: 255
Output Features: Not Used
Options Configuration:
interface-table (timeout 600 seconds)
exporter-stats (timeout 600 seconds)
#show flow monitor
Flow Monitor NetFlowMonitor:
Description: User defined
Flow Record: SolarWinds
Flow Exporter: NTA (inactive)
Cache:
Type: normal
Status: not allocated
Size: 128 entries / 0 bytes
Cache:
Type: normal (Platform cache)
Status: not allocated
Size: Unknown
Timers:
Local Global
Inactive Timeout: 15 secs
Active Timeout: 1800 secs 1800 secs
Update Timeout: 1800 secs
#show flow record
flow record SolarWinds:
Description: Solarwinds Flow Template
No. of users: 1
Total field space: 29 bytes
Fields:
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input physical snmp
match interface output physical snmp
collect counter bytes
collect counter packets