Flow exporter inactive

[Cisco Freak]

Hi Experts,

I have a configured Netflow in an ASR router, but it doesn't export flow data as expected.

Router#sh flow monitor FLOW-MONITOR-1
Flow Monitor FLOW-MONITOR-1:
Description: User defined
Flow Record: IPV4_1
Flow Exporter: EXPORTER-2 (inactive)
                          EXPORTER-1 (inactive)
Cache:
Type: normal (Platform cache)
Status: allocated
Size: 200000 entries
Inactive Timeout: 15 secs
Active Timeout: 1800 secs
Update Timeout: 1800 secs
Synchronized Timeout: 600 secs
Trans end aging: off

Router#

Here is the relevant config:

Router#sh run flow monitor
Current configuration:
!
flow monitor Flow-FMM
exporter Flow-EM
cache timeout active 60
!
!
flow monitor FLOW-MONITOR-1
exporter EXPORTER-2
exporter EXPORTER-1
record IPV4_1
!

Router#sh run flow exporter
Current configuration:
!
flow exporter Flow-EM
destination 10.10.10.10
source GigabitEthernet0/0/0.271
transport udp 2055
!
!
flow exporter EXPORTER-1
destination 10.10.12.10
transport udp 2055
export-protocol netflow-v5
!
!
flow exporter EXPORTER-2
destination 10.10.10.200
transport udp 2055
export-protocol netflow-v5
!
Router#

Router#sh run flow record
Current configuration:
!
flow record IPV4_1
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
!
Router#

Can you guys please help with this?

CF

[Cisco Freak]

Any help would be appreciated.

[mkamar]

I'm Facing the same issue with  IOS XE Software, Version 03.17.00.S.

[jaredkelsey]

I am experiencing the same issue on my ASR.

But my config looks like this:

flow record NetFlowRecord
 match ipv4 protocol
 match ipv4 source address
 match ipv4 destination address
 match transport source-port
 match transport destination-port
 collect counter bytes
 collect counter packets

flow exporter Solarwinds
 destination 10.XXX.XXX.XXX
 transport udp 2055

 source Port-channel1
 export-protocol netflow-v5

flow monitor NetFlow
 exporter Solarwinds
 record NetFlowRecord

#sh flow monitor NetFlow
Flow Monitor NetFlow:
  Description:       User defined
  Flow Record:       NetFlowRecord
  Flow Exporter:     Solarwinds (inactive)
  Cache:
    Type:                 normal (Platform cache)
    Status:               allocated
    Size:                 200000 entries
    Inactive Timeout:     15 secs
    Active Timeout:       1800 secs
    Update Timeout:       1800 secs
    Synchronized Timeout: 600 secs
    Trans end aging:   off

[Brendan Marmont]

I was able to fix this after I applied the flow monitor to particular interface to monitor the traffic (inbound/outbound). Eg. configuration below on a couple of switch ports.

interface GigabitEthernet1/0/1
 switchport access vlan xxx
 switchport mode access
 switchport nonegotiate
 switchport port-security maximum 10
 switchport port-security aging time 5
 switchport port-security aging type inactivity
 switchport port-security
 ip flow monitor PRTG input
 spanning-tree portfast
!

PRTG is the name of the flow monitor.

Thoughts?

[Packet Herder7]

ip address xxx.xxx.xxx.xxx 255.255.255.252
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip flow monitor NetFlow-monitor input
 ip flow monitor NetFlow-monitor output
 ip access-group 110 in
 negotiation auto
 no ipv6 redirects
 no ipv6 unreachables
end

As you can see, I have the monitor enabled for both directions and I am still seeing the exporter as "Inactive". Makes no sense really.

Running IOX-XE version 3.17.03.S

[Bi Xiong Wu]

Hi 

After i changed the configuration to V9,it woks correct.

flow exporter EXPORTER-2
  export-protocol netflow-v9

[Grant-Security/Network Analyst]

I cannot add the following to an interface or to the vlans which is why I believe mine shows to be inactive.

3750X-06(config)#inter g1/0/1
3750X-06(config-if)#ip flow monitor NETFLOW-MONITOR sampler NETFLOW-SAMPLER input
% Flow Monitor: 'NETFLOW-MONITOR' could not be added.

3750X-06#sh flow monit
Flow Monitor NETFLOW-MONITOR:
Description: NETFLOW-MONITOR
Flow Record: NETFLOW-RECORD
Flow Exporter: NETFLOW-EXPORTER (inactive)
Cache:
Type: normal
Status: not allocated
Size: 128 entries / 0 bytes
Cache:
Type: normal (Platform cache)
Status: not allocated
Size: Unknown

Why can't I add IP monitor commands?  Is it the switch that is the problem?  I am using a 3750-X.

[d.getaneh]

I am having the same issue with Cat3750-X not be able to add ip flow monitor xxxxx on the interfaces.

[Grant-Security/Network Analyst]

I too am having the same issue?  Any ideas?  Software version problem?

RK10-SW1(config-if)#ip flow monitor MONITOR_IN input
% Flow Monitor: 'MONITOR_IN' could not be added.

[Georg Pauwen]

Hello,

post the output of 'sh ver' so we can see what router model and IOS version you have...