|
| | | Junior Member
 
Group: Forum Members
Last Login: 10/1/2008 2:33:14 PM
Posts: 16, Visits: 19 |
| | I installed Netflow on a Windows 2003 R2 server, configured the router(s), and am unable to see any devices in the NetFlow Sources list. After reading some of the other posts, I noticed that my WUG box was not listening on port 9999, so I have changed to 514 and restarted the services and am still unable to see any devices. It is also set in the correct timezone... Any ideas? Thanks |
| |
| | | Time Traveler
Group: Ipswitch Employees
Last Login: Today @ 5:05:16 PM
Posts: 227, Visits: 1,332 |
| The first thing is to make sure the NetFlow collector is listening. It runs as a separate service called "Ipswitch Netflow Collector", so make sure you restart that service. If the service is running and listening, check the Netflow logs. You can even change the log level to verbose to see more information. One other thing to check would be firewalls and then the router itself.
Hope this helps,
Claudio Robles
Ipswitch Network Monitor Team |
| |
| | | 
Forum Member
Group: Forum Members
Last Login: 12/18/2008 6:41:10 PM
Posts: 45, Visits: 5,664 |
| What port are your routers set up for on Netflow?
UDP port 514 is for Syslog. |
| |
| | | Junior Member
Group: Forum Members
Last Login: 10/1/2008 2:33:14 PM
Posts: 16, Visits: 19 |
| Claudio,
Thanks for the response.I have restarted the service a couple of times from the web interface, and from the server, without any luck. Can you tell me where to find the logs? After reading other posts, I had already adjusted the level to verbose... There arent any firewalls between the server and the router, and the router appears to configured properly: Flow export v9 is enabled for main cache
Exporting flows to 192.168.X.X (514)
Exporting using source IP address 192.168.X.X
Version 9 flow records
33216 flows exported in 4451 udp datagrams
0 flows failed due to lack of export packet
1 export packets were sent up to process level
0 export packets were dropped due to no fib
0 export packets were dropped due to adjacency issues
0 export packets were dropped due to fragmentation failures
0 export packets were dropped due to encapsulation fixup failures Thanks again, Brad |
| |
| | | Junior Member
Group: Forum Members
Last Login: 10/1/2008 2:33:14 PM
Posts: 16, Visits: 19 |
| | Thanks for your response. I read another post in which they suggested checking which ports were listening on the server... I noticed 9999 was not, 514 was, so I am just using it. I have changed the web interface and have pointed the routers at this port. Do you see an issue with this? |
| |
| | | Time Traveler
Group: Ipswitch Employees
Last Login: Today @ 5:05:16 PM
Posts: 227, Visits: 1,332 |
| | Hi, The Collector listen by default on port 9999. Not sure what program is listening on 514. You can check with command netstat -anb on a DOS window to see who is listening where. It the collector is running and not listening one problem could be the license. You can see the NetFlow log, which are accesable only with web interface among the Netflow reports. Now, WhatsUp has two GO menus which users can switch by selecting at the bottom of it. Hope this help. Claudio Robles
Ipswitch Network Monitor Team |
| |
|
|