cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2597
Views
0
Helpful
1
Replies

configuration netflow on asa

Dear all,

I configured netflow on asa but on PRTG i don't see any traffic. Below the configuration I did:

 

flow-export destination inside  10.111.1.102 2055

 

 

 

access-list netflow-hosts extended permit ip any any

 

class-map NetFlow-traffic

  match access-list netflow-hosts

 

 

policy-map global_policy

  class inspection_default

      class NetFlow-traffic

      flow-export event-type all destination 10.111.1.102

 

 

I configured also a capture

capture test2 type raw-data interface inside [Capturing - 2724 bytes]
  match udp any host 10.111.1.102 eq 2055

and this is the output:

2 packets captured

1: 14:12:20.075588 802.1Q vlan#1 P0 10.111.2.250.12235 > 10.111.1.102.2055: udp 1388
2: 14:12:20.075618 802.1Q vlan#1 P0 10.111.2.250.12235 > 10.111.1.102.2055: udp 1212

 

 

# sh flow-export counters

destination: inside 10.111.1.102 2055
Statistics:
packets sent 4
Errors:
block allocation failure 0
invalid interface 0
template send failure 0
no route to collector 0
source port allocation failure 0

#

 

Can anyone help me to understand why the PRTG dosen't receive traffics ?

1 Reply 1

mikael.lahtela
Level 4
Level 4
Hi,

Can you run Wireshark or something else on you PRTG server to see that the packets arrive at the server?
Check that ports are open on the PRTG server firewall.
The traffic information on PRTG is not live, see more information here:
https://kb.paessler.com/en/topic/1423-how-to-monitor-cisco-asa-firewalls-using-netflow-9-and-prtg

br, Micke

Review Cisco Networking for a $25 gift card