Hello,
I am testing the following Flexible Netflow configuration on one of our ASR1001-X in the lab.
The router is running 3.14.0S:
flow record ipv4-netflow-record
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
collect counter bytes
collect counter packets
!
!
flow exporter ipv4-netflow-exporter
destination <collector_IP_address> vrf MGMT
source GigabitEthernet0/0/2
transport udp 2055
export-protocol netflow-v5
!
!
flow monitor ipv4-netflow-monitor
exporter ipv4-netflow-exporter
record ipv4-netflow-record
!
sampler ipv4-netflow-sampler
mode deterministic 1 out-of 1024
!
interface GigabitEthernet0/0/4
[..]
ip flow monitor ipv4-netflow-monitor input
ip flow monitor ipv4-netflow-monitor output
[..]
!
The flows are collected, however, they are not exported to the collector:
lab#sh flow monitor ipv4-netflow-monitor cache
Cache type: Normal (Platform cache)
Cache size: 200000
Current entries: 31063
High Watermark: 67037
Flows added: 11665907
Flows aged: 11601943
- Active timeout ( 1800 secs) 1097
- Inactive timeout ( 15 secs) 11600846
IPV4 SRC ADDR IPV4 DST ADDR TRNS SRC PORT TRNS DST PORT IP PROT bytes pkts
=============== =============== ============= ============= ======= ========== ==========
xxx.xxx.xxx.xxx yyy.yyy.yyy.yyy 11393 443 6 156 3
xxx.xxx.xxx.xxx yyy.yyy.yyy.yyy 443 23502 6 2651 4
xxx.xxx.xxx.xxx yyy.yyy.yyy.yyy 0 0 1 36 1
xxx.xxx.xxx.xxx yyy.yyy.yyy.yyy 18155 80 6 1284 27
xxx.xxx.xxx.xxx yyy.yyy.yyy.yyy 443 9313 6 3380 20
!
lab#sh flow exporter name ipv4-netflow-exporter statistics
Flow Exporter ipv4-netflow-exporter:
Packet send statistics (last cleared 01:10:47 ago):
Successfully sent: 0 (0 bytes)
Client send statistics:
Client: Flow Monitor ipv4-netflow-monitor
Records added: 0
Bytes added: 0
Connectivity between exporter and collector is ok. Also, port 2055/UDP on the server is open.
Any hints as to why the flows are not exported even though they are collected?
BR,
Kostas
