Netflow being rejected by server. (237 Views)
Reply
Occasional Advisor
askhemant
Posts: 15
Registered: ‎04-25-2012
Message 1 of 3 (237 Views)

Netflow being rejected by server.

I set up NNMi and iSPI performance for Traffic on the same server.  When I click 'NNM iSPI Performance for Traffic Leaf Collectors' I see the collector name, the status is 'RUNNING', there is a check mark on 'Flow' and the listen port is 2055. 

 

When I go into 'NNM iSPI Performance for Traffic Configuration' and select 'Leaf Collectors' I see the name, IP and status is 'RUNNING'.  When I click 'Installation Verification' and click Validate everything checks out (except the secondary options which is not used). 

 

The problem is I'm not getting any flows.  So I turned up Wireshark and see the following:

 

Source:                     Destination:           Protocol:              Info:

10.122.1.1             10.120.166.21      CFLOW                  total: 1 (v9) record (I think this is OK, source is Cisco dest is iSPI)

10.120.166.21    10.122.1.1               ICMP                      Destination unreachable (Port unreachable)

 

The server is sending a ICMP protocol unreachable packet back to the Cisco.  When I do a netstat -a the (Windows) server is not listening on udp 2055 (NetFlow).  Attached is a screen shot from Wireshark (couldn't insert in body).

 

Any ideas????

 

Thanks,

 

Tim

 

 

 

 

 

Honored Contributor
LindsayHill
Posts: 743
Registered: ‎11-16-2011
Message 2 of 3 (212 Views)

Re: Netflow being rejected by server.

First up, does your server have a local firewall running? Make sure you're allowing inbound UDP/2055.

 

That said, I've found the iSPI Traffic Collector to be fairly unreliable, until I got some hotfixes applied to it.

 

Until then, I had a number of occasions where restarting the Collectors would result in the processes appearing to run, but not listening on the desired port. Running through a few restart cycles would usually get it working again.

 

If you hunt through the application logs, you'll see some indications of errors. Check the logs, see if there's anything obvious. Other than that, the only thing you can do is to restart the master and leaf collectors a few times.

 

You should also open a support case. They may give you some updated binaries, which have helped with some instability issues I've had. 

CCIE 36708 | @northlandboy | lkhill.com
Honored Contributor
Ian_4
Posts: 3,738
Registered: ‎10-04-2000
Message 3 of 3 (195 Views)

Re: Netflow being rejected by server.

What are the exception you see in the log file?
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.