NAM receives NDE traffic, but don't display nothing in "Monitor"

Unanswered Question
Aug 13th, 2008

NAM receives NDE traffic, but don't display anything in "Monitor"

I've several routers exporting NetFlow v9 to a NAM 3.6(1). If I enable the “Listen Mode”, I see packets arrive to the NAM.

When I go to the “Monitor” tab and select “NETFLOW”, nothing is displayed.

What it's wrong?

Regards,

Waldemar Pera

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Joe Clarke Wed, 08/13/2008 - 12:03

Netflow 9 is not yet supported by the NAM. Support for this version is planned for NAM 4.0. Currently, you must be exporting 1, 5, 6, 7, and 8 (with support for v8 aggregation caches as well).

w-pera Wed, 08/13/2008 - 15:44

Thanks Joe,

I think that but, if you see the NAM 3.6 DS (http://www.cisco.com/en/US/prod/collateral/modules/ps2706/ps5025/product_data_sheet0900aecd804bab11.html):

Supported topologies and data sources

LAN: Switch Port Analyzer (SPAN), Remote SPAN (RSPAN), VLAN ACL (VACL)-based captures, NetFlow (versions 1, 5, 6, 7, 8, and 9)

WAN: NetFlow (versions 1, 5, 6, 7, 8, and 9) from local and remote devices, VACL-based captures for FlexWAN/Optical Service Module (OSM) interfaces (Cisco IOS Software only)

Does it is a documentation error?

Thanks and regards.

Joe Clarke Wed, 08/13/2008 - 19:00

There seems to be some conflicting information. The NAM's help does not list version 9 as being supported, and I have seen an internal note that it works, but AS information is not shown.

Assuming you are seeing the packets, add a Netflow source, then go to Setup > Monitor, select your Netflow source, and enable the features you wish to monitor.

w-pera Thu, 08/14/2008 - 06:56

Joe, I've tried manually and "Listen Mode" to add the NDE devices.

Also, I've enabled the "Setup > Monitor" to NetFlow.

The results are the same: nothing appears in "Monitor" when I select "NETFLOW".

??

w-pera Thu, 08/14/2008 - 06:57

Note: I will to upgrade NAM OS 3.6(1a) and update with Patch 3.0.

Joe Clarke Thu, 08/14/2008 - 07:36

One other thing you can try is to change the NDE version on one of the devices. I am using version 5 in my lab, and it works fine. This would be consistent with the NAM 3.6 online help.

w-pera Thu, 08/14/2008 - 09:48

Two devices are NetFlow v9 (the NAM-2 show the V9 Templates) and one is NetFlow v5.

NAM OS is 3.6(1a) Patch 3.0 + Crypto Path.

When in "Setup > Data Sources > NetFlow > Devices" I select a device and press "Test", the window shows "Netflow on device: Configuration unknown"

Joe Clarke Thu, 08/14/2008 - 10:17

Make sure the SNMP read community string you have specified for this device is valid, and that the NAM has the ability to query this device with SNMP.

w-pera Thu, 08/14/2008 - 16:31

NetFlow v5 and v9 working.

Situation: If I enable the individual sources to "Monitor" (each router), I see the NetFlow individually but it isn't work if select NETFLOW under "Monitor" tab.

This doesn't happend with SPAN/RSPAN/VACL source. Always, I see the information like SPAN or by each DATAPORT.

Maybe a bug?

Joe Clarke Thu, 08/14/2008 - 16:57

The NETFLOW component is NetFlow from the local switch. It is not an aggregation of all NDE sources. To see data for each NDE source, you would have to select each source in turn.

w-pera Fri, 08/15/2008 - 04:22

Thanks. It was a wrong concept from me.

Now, do you now a good source to configure NetFlow into Cat6500 (Sup720)?

Thanks to much.

Actions

This Discussion