I am currently toying around with the new release and now I want to try out the netflow feature of the WLC.
I have already setup the monitor as well as an exporter. I also used the default flow record, which is actually the only one.
When I now check the data in my netflow application I only see packets with no valid source and destination IP address and with protocol 0, HOPOPT.
Is there any way to 'decode' this traffic or telling the controller to send the TCP/UDP protocol?
Most NetFlow reporting tools expect a traditional flow tuple else they can't display the data.
If you can get a packet capture to me WITH THE TEMPLATE, I can replay it in our lab and build you some reports in Scrutinizer.
WLC Netflow is NOT standard netflow, so you cannot use any netflow tools to decode it. As far as I know, Scrutinizer & Cisco Prime Assurance are the one you have to use. See below posts for more detail
On a side note, Cisco has deffered ALL software codes except 7.0MR5 (18.104.22.168), 7.4MR2 (22.214.171.124) & 7.6.x. So move onto 7.4MR2 in order to get TAC support.
*** Pls rate all useful responses ****