Source could not find NetFlow template?

To the Ipswitch web site

Ipswitch Forums
Home      Members   Calendar   Who's On
Welcome Guest ( Login | Register )
      



Source could not find NetFlow template?Expand / Collapse
Author
Message
Posted 10/4/2008 12:08:32 AM


Junior Member

Junior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior Member

Group: Forum Members
Last Login: 11/17/2008 6:41:05 PM
Posts: 13, Visits: 41
What does NetFlow log message "Source could not find NetFlow template ID 1024" indicate?

Thanks...Scott
Post #47494
Posted 10/7/2008 11:42:23 AM
Time Traveler

Time TravelerTime TravelerTime TravelerTime TravelerTime TravelerTime TravelerTime TravelerTime Traveler

Group: Ipswitch Employees
Last Login: Today @ 3:22:04 PM
Posts: 227, Visits: 1,327
Scott,

In Netflow version 9, routers send templates from time to time and data referring to the templates. Therefore, data can not be interpreted before receiving the corresponding template.
This message indicate that, but it should be temporary.

Hope this help.

Claudio Robles
Ipswitch Network Monitor Team
Post #47546
Posted 10/7/2008 11:48:24 AM


Junior Member

Junior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior Member

Group: Forum Members
Last Login: 11/17/2008 6:41:05 PM
Posts: 13, Visits: 41
I've been getting hundreds of these messages since the netflow was activated several days ago.
Post #47547
Posted 10/8/2008 11:37:28 AM
Time Traveler

Time TravelerTime TravelerTime TravelerTime TravelerTime TravelerTime TravelerTime TravelerTime Traveler

Group: Ipswitch Employees
Last Login: Today @ 3:22:04 PM
Posts: 227, Visits: 1,327
We have a bug on our collector when routers send a NetFlow v9 packet with more than one template. We had not seen this here and so far we do not have a reliable way to test the fix. Do you know how to make a router send several templates in one packet?

What kind of router do you have? Or what kind of configuration do you have?

Thanks.

Claudio Robles
Ipswitch Network Monitor Team
Post #47601
Posted 10/8/2008 7:35:08 PM


Junior Member

Junior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior Member

Group: Forum Members
Last Login: 11/17/2008 6:41:05 PM
Posts: 13, Visits: 41
I have two Cisco 2811 routers running c2800nm-ipbase-mz.124-3a.bin. Only one of them is causing the error:

interface Multilink1
ip address 172.21.255.9 255.255.255.252
ip flow ingress
ppp multilink
ppp multilink group 1
!
interface FastEthernet0/0
ip address 172.21.0.26 255.255.240.0
ip flow ingress
!
ip flow-export version 9
ip flow-export destination 172.21.6.1 9999
ip flow-top-talkers
top 10
sort-by bytes

Only the problem router is configured for "ip flow-top-talkers".

Thanks...Scott
Post #47622
Posted 10/9/2008 9:42:02 AM
Time Traveler

Time TravelerTime TravelerTime TravelerTime TravelerTime TravelerTime TravelerTime TravelerTime Traveler

Group: Ipswitch Employees
Last Login: Today @ 3:22:04 PM
Posts: 227, Visits: 1,327
Hi Scott,

Yes, that option "top talkers" made it.

Thanks a lot.

Claudio Robles
Ipswitch Network Monitor Team
Post #47642
« Prev Topic | Next Topic »


Reading This TopicExpand / Collapse
Active Users: 0 (0 guests, 0 members, 0 anonymous members)
No members currently viewing this topic.
Forum Moderators: Dave, Jason Benton, Jason Williams

PermissionsExpand / Collapse

All times are GMT -5:00, Time now is 3:35pm

Powered By InstantForum.NET v4.1.4 © 2009
Execution: 0.063. 9 queries. Compression Enabled.