cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
1528
Views
0
Helpful
1
Replies

Netflow problem with PRTG

kh.nguyen
Level 1
Level 1

Hello all,

I am using 2 Cisco Catalyst 2960X as a stacked switch and I am trying to set up Netflow on them with PRTG as network monitor but it seems that I'm stuck somewhere, below are the config I'm using:

flow record toPRTG
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
collect interface input
!
!
flow record toPRTG1
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
!
!
flow exporter toPRTG
destination 172.18.145.xxx
transport udp 9995
!
!
flow monitor toPRTG
exporter toPRTG
cache timeout active 15000
record toPRTG
!
!
sampler toPRTG
mode random 1 out-of 32

!

!
interface GigabitEthernet2/0/10
switchport access vlan xxx
switchport mode access
ip flow monitor toPRTG sampler toPRTG input
spanning-tree portfast
!

ip flow-export version 9
ip flow-export destination 172.18.145.xxx 9995

And the settings on PRTG

I can see that the Flow Exporter is sending data, but PRTG does not receive any thing from the UDP port I have configured. There is a firewall between 2 devices but I have allowed the flow to go through it. Also there are no firewall on PRTG.

LBN-STACK-SW#show flow exporter statistics
Flow Exporter toPRTG:
Packet send statistics (last cleared 2d00h ago):
Successfully sent: 6489 (4907448 bytes)

Client send statistics:
Client: Flow Monitor toPRTG
Records added: 195422
- sent: 195422
Bytes added: 3126752
- sent: 3126752

May I know what I might have configured wrong?

Thanks in advance.

1 Reply 1

csoftichsg
Level 1
Level 1

Try adding an Export Source:

ip flow-export source GigabitEthernet0/0 or whatever your source may be back to the PRTG box.

I also have my active flow timeout set to 1 min:

ip flow-cache timeout active 1