no cache entries to display on Show Flow Monitor

[fathursciglio]

Hi guys,

I wanna check the IP Source and IP Destinations via Flow Monitor, but then it says "There are no cache entries to display." here's the configuration and the device I've been used

TWR-FUSION01#sh version
Cisco IOS XE Software, Version 17.03.02
Cisco IOS Software [Amsterdam], ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 17.3.2, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2020 by Cisco Systems, Inc.
Compiled Sat 31-Oct-20 13:21 by mcpre

ROM: 16.12(2r)

Smart Licensing Status: Registration Not Applicable/Not Applicable

cisco ISR4451-X/K9 (2RU) processor with 1714961K/6147K bytes of memory.
Processor board ID FGL2531LMMX
Router operating mode: Autonomous
4 Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
7081983K bytes of flash memory at bootflash:.

Configuration register is 0x2102

TWR-FUSION01#show flow monitor Flow-Monitor cache format record
Cache type: Normal (Platform cache)
Cache size: 200000
Current entries: 0

Flows added: 0
Flows aged: 0

There are no cache entries to display.

TWR-FUSION01#show run flow monitor Flow-Monitor
Current configuration:
!
flow monitor Flow-Monitor
cache timeout active 60
statistics packet protocol
statistics packet size
record Flow-Record

TWR-FUSION01#show flow interface gigabitEthernet 0/0/1
Interface GigabitEthernet0/0/1
FNF: monitor: Flow-Monitor
direction: Input
traffic(ip): on
FNF: monitor: Flow-Monitor
direction: Output
traffic(ip): on

TWR-FUSION01#show flow record Flow-Record
flow record Flow-Record:
Description: User defined
No. of users: 1
Total field space: 36 bytes
Fields:
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
collect interface output
collect counter bytes
collect counter packets
collect timestamp sys-uptime first
collect timestamp sys-uptime last

Is there any configuration I have been miss? or there something to be added?

Please kindly advised, thanks

[gwarn]

I have opened a case with TAC (happening on all 4 of my recently deployed C8200-1N-4T routers.  Will update if I find fix.  

show flow monitor NAME cache format table
% Flow Monitor: 'NAME' has no cache.

[Paul F 23]

I'm having a similar problem with 17.9.5a. Did you get a solution to this?

[gwarn]

Yes I did
I needed to adjust my flow template and it worked
Here is my template for your review

flow record NETFLOW_REC_IN
description NetFlow INGRESS record format to send to Solarwinds Netflow
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
collect interface output
collect counter bytes
collect counter packets
!
flow record NETFLOW_REC_OUT
description NetFlow EGRESS record format to send to Solarwinds Netflow
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
collect interface output
collect counter bytes
collect counter packets

!
flow exporter TB-FlowExport
description Netflow ExportV9 to Solarwinds
destination x.x.x.x
source GigabitEthernet0/0/1
transport udp 2055
!
!
flow monitor TB-FlowMonitor1
description Original Netflow captures
exporter TB-FlowExport
cache timeout inactive 10
cache timeout active 5
record TB-Netflow1

flow monitor NETFLOW_MON_IN
exporter TB-FlowExport
cache timeout active 60
record NETFLOW_REC_IN
!
!
flow monitor NETFLOW_MON_OUT
exporter TB-FlowExport
cache timeout active 60
record NETFLOW_REC_OUT

interface GigabitEthernet0/0/0.48
ip flow monitor NETFLOW_MON_IN input
ip flow monitor NETFLOW_MON_OUT output
!

[charles.kulcsar]

I know it's been a few months, but do you remember what adjustment you had to make?  what was wrong before, and what fixed that/those element(s)?  i see your active timeout of 5 seconds could have been causing issues, but that's all i can think of from looking at it.

myself, i'm experiencing that same "% Flow Monitor: 'NAME' has no cache." as well as seeing "status: not allocated" from sh flow mon when the monitors are definitely applied to interfaces.

[gwarn]

Yes here is the TAC case and steps I followed based on their recommendation

SR 696654545 : Cannot view netflow cached via cli show flow cache commands

Hello, I hope this email finds you well. I havent received a response yet but I gave this a second shot in a LAB. Removing these 3 collects allowed me to have an allocated status for the flow monitor in a subinterface: match datalink mac source

Removing these 3 collects allowed me to have an allocated status for the flow monitor in a subinterface:

1. match datalink mac source address input
2. match datalink mac destination address input
3. match datalink source-vlan-id

The thing is I added them back one by one to see if one was more problematic than the other but I managed to put them all back.

I followed these directions and had success - remove those 3 then add back and magically started working.

Hope this helps