Hi guys, I have a NetFlow configured router (1841) connected to a switch (2960) with SPAN in Packet Tracer 7. Idea is to have that switch mirror selected ports to that router to use to generate NetFlow data. That switch has a SPAN destination for that link to the router, with sources of other interfaces connected to generic PCs. Have ip flow ingress configured on the router interface to the switch and all the basic settings (v9, export destination).
I'm trying to generate some flows (by pinging from a PC to the switch SVI) but it doesn't add anything (using show ip cache flow). I can confirm that a flow is added if I ping from the PC directly to the router's interface which means the NetFlow ingress is working. I have also verified that the switch is sending copies of the traffic to the router in Simulation mode. But when it comes to mirrored traffic, flows are not added. I have tried using Simulation mode for PC to switch test but it's really broken e.g. the time will usually jump to 150 seconds after the ping events are done. On one occasion I was able to get a flow added after pinging from PC to switch in Simulation mode only (after advancing each event manually) but I can't verify this was legitimate.
Is this a Packet Tracer issue or is what I'm trying to do simply not going to work on real hardware?
Sorry if this isn't in the right section.
