The unix time in statistics of netflow for nat translation on asr1001

[unfraget]

hi everybody,
i've issue with netflow statistics for nat translation, somehow in netflow statistics on collector appear tthe start of unix time 1970-01-01 04:00:00.000. 

although the time on asr is configured correctly:

sh clock detail
10:18:02.508 MSK Fri Feb 21 2020

NAT settings 

ip nat settings pap
ip nat log translations flow-export v9 udp destination 84.47.177.11 20100 source Loopback777
ip nat translation timeout 120
ip nat translation tcp-timeout 3600
ip nat translation pptp-timeout 3600
ip nat translation udp-timeout 240
ip nat translation finrst-timeout 30
ip nat translation syn-timeout 30
ip nat translation icmp-timeout 20
ip nat translation max-entries all-host 4096
no ip nat service sip tcp port 5060
no ip nat service sip udp port 5060

IOS veriosn 

Cisco IOS Software, ASR1000 Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.5(3)S5, RELEASE SOFTWARE (fc2)

how can i fix this issue?

[Georg Pauwen]

Hello,

which Netflow collector are you using ?

[unfraget]

we nfdump.

very interesting, i decoded tcpdump, and see that date in the netflow package  is correct 

[Georg Pauwen]

Hello,

looks like the ASR is sending the correct timestamps, but somehow nfdump scambles them into something else. What does the configuration of your flow record look like ? Try and toggle the values in the two lines below:

collect timestamp absolute first
collect timestamp absolute last

[unfraget]

tomorrow, i'll try to set sys-uptime in settings of recorder
(config-flow-record)#collect timestamp ?
absolute Timestamps based on the epoch of 00:00 UTC 1st Jan 1970
sys-uptime Timestamps based on the sys-uptime

i think that i'm should use "sys-uptime" settings

[unfraget]

it didn't working :(