cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5144
Views
0
Helpful
14
Replies

Netflow

robin.disla
Level 1
Level 1

I need help with the following error I'm configuring netflow in my network and when I assigned the configuration in the interface it shows me the following % Flow Monitor: Failed to add monitor to interface: internal error: field information missing

 

 

14 Replies 14

johnd2310
Level 8
Level 8

Hi,

 

What is your netflow config and what device are you configuring?

 

Thanks

John

**Please rate posts you find helpful**

flow record HIT-NET-IN
match flow direct
match ipv4 tos
match transport destination-port
match transport source-port
collect counter bytes long
collect counter packets long
collect interface output
collect application dns domain-name

flow record HIT-NET-OUT
match flow direction
match interface output
match ipv4 destination address
match ipv4 protocol
match ipv4 source address
match ipv4 tos
match transport destination-port
match transport source-port
collect counter bytes long
collect counter packets long
collect interface input
collect application dns domain-name

*****************************************

flow exporter HIT-NET
source vlan X
destination X.X.X.X
transport udp 2055
export-protocol netflow-v9

***************************************

flow monitor Netflow-Monitor-In
exporter HIT-NET
cache timeout inactive 10
cache timeout active 60
record HIT-NET-IN

flow monitor Netflow-Monitor-Out
exporter HIT-NET
cache timeout inactive 10
cache timeout active 60
record HIT-NET-OUT

*********************************

The error is in this part.



interface ten1/0/5

ip flow monitor Netflow-Monitor-In input

% Flow Monitor: Failed to add monitor to interface: internal error: field information missing
ip flow monitor Netflow-Monitor-Out output

balaji.bandi
Hall of Fame
Hall of Fame

We have not have enough information to give you suggestion here, the error show something configured wrong here.

 

Please can you post below information ;

1. what is the device model

2. IOS/NXOS code version

3. your netflow configuration.

 

here is latest same config guide for referenence in case you like to refer :

 

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-6/configuration_guide/sys_mgmt/b_166_sys_mgmt_9300_cg/b_166_sys_mgmt_9300_cg_chapter_0100.html#task_lq1_hwl_j1b

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Hello,

 

I have the next information.

 

1. what is the device model

 

Cisco Catalyst 9500-40X

 

2. IOS/NXOS code version

 

ios-xe version 16.09.02

 

3. your netflow configuration.

 

flow record HIT-NET-IN
match flow direct
match ipv4 tos
match transport destination-port
match transport source-port
collect counter bytes long
collect counter packets long
collect interface output
collect application dns domain-name

flow record HIT-NET-OUT
match flow direction
match interface output
match ipv4 destination address
match ipv4 protocol
match ipv4 source address
match ipv4 tos
match transport destination-port
match transport source-port
collect counter bytes long
collect counter packets long
collect interface input
collect application dns domain-name

*****************************************

flow exporter HIT-NET
source vlan X
destination X.X.X.X
transport udp 2055
export-protocol netflow-v9

***************************************

flow monitor Netflow-Monitor-In
exporter HIT-NET
cache timeout inactive 10
cache timeout active 60
record HIT-NET-IN

flow monitor Netflow-Monitor-Out
exporter HIT-NET
cache timeout inactive 10
cache timeout active 60
record HIT-NET-OUT

*********************************

The error  is in this part.

 

interface ten1/0/5

ip flow monitor Netflow-Monitor-In input

% Flow Monitor: Failed to add monitor to interface: internal error: field information missing
ip flow monitor Netflow-Monitor-Out output

 

Hi it must be applied to a LAYER 3 interface with Ip enabled,is that ten gig interface layer 2 or 3 ?

its an l3 command your applying

Is a interface asociated to specific SVI interface. for example:
Vlan X
int Vlan X
ip address x.x.x.x/x
the error is present in this part
int ten1/0/1
ip flow monitor Netflow-Monitor-In input
% Flow Monitor: Failed to add monitor to interface: internal error: field information missing

int ten1/0/1  < is the L3 interface ?

 

show you post show run int ten1/0/1

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

interface Vlan 100
ip address X.X.X.X X.X.X.X.X
end

interface TenGigabitEthernet1/0/1
switchport access vlan 100
end

Try below config and let us know

 

interface Vlan 100

ip flow monitor Netflow-Monitor-In input

ip flow monitor Netflow-Monitor-Out output

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help


I treat the recommended and shows the following error:

% Flow Monitor: Failed to add monitor to interface: flexible netflow not supported on vlan interfaces

Look at a good example of netflow from solarwinds it woriks and tested as expected.

 

https://support.solarwinds.com/SuccessCenter/s/article/Examples-of-Flexible-NetFlow-Configuration

 

also look at the limitation as suggested.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Hi
It needs to be under the vlan interface any interface with an IP enabled

the configuration is as follows:

interface Vlan 100
ip address X.X.X.X X.X.X.X.X
end

interface TenGigabitEthernet1/0/1
switchport access vlan 100
end

Hi
looks like thats a limitation your hitting on the switches
, has to be on a physical IP interface same as the 3k series

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9400/software/release/16-8/configuration_guide/nmgmt/b_168_nmgmt_9400_cg/b_168_nmgmt_9400_cg_chapter_0111.html

Layer 2, VLAN and Layer 3 interfaces are supported, but the device does not support SVI and tunnels.
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: