tips:netflow_troubleshooting
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
tips:netflow_troubleshooting [2020/03/18 18:53] – [Troubleshooting Netflow] navaneeth | tips:netflow_troubleshooting [2020/03/20 15:29] (current) – [8. Analyse the captured flows] navaneeth | ||
---|---|---|---|
Line 6: | Line 6: | ||
No data on the dashboard after enabling Netflow in Trisul Network Analytics. | No data on the dashboard after enabling Netflow in Trisul Network Analytics. | ||
** | ** | ||
+ | |||
+ | {{: | ||
+ | |||
===== Precondition ===== | ===== Precondition ===== | ||
Line 33: | Line 36: | ||
Do you see netflow packets on the screen ? | Do you see netflow packets on the screen ? | ||
+ | |||
+ | {{: | ||
**Yes**. Move to next | **Yes**. Move to next | ||
Line 47: | Line 52: | ||
Check if all the probes and hubs are in the Started position. | Check if all the probes and hubs are in the Started position. | ||
- | {{: | + | {{: |
**Yes**. Move to next. | **Yes**. Move to next. | ||
Line 67: | Line 72: | ||
If any other interface.Click " | If any other interface.Click " | ||
- | Please ensure that you have Restarted Trisul after this step. | + | {{: |
+ | <note important> | ||
+ | </ | ||
==== 4. Check if the NETFLOW_TAP mode is enabled==== | ==== 4. Check if the NETFLOW_TAP mode is enabled==== | ||
Line 79: | Line 86: | ||
**No**. Change it from TAP mode to NETFLOW_TAP mode. | **No**. Change it from TAP mode to NETFLOW_TAP mode. | ||
- | Do not forget to restart | + | <note important> |
+ | </ | ||
==== 5. Check if the Netflow ports are interpreted correctly ==== | ==== 5. Check if the Netflow ports are interpreted correctly ==== | ||
By default, | By default, | ||
Line 90: | Line 97: | ||
**No**. Add the specific port number to Netflow using Context: default → profile0 → Netflow Wizard. | **No**. Add the specific port number to Netflow using Context: default → profile0 → Netflow Wizard. | ||
- | You need to restart trisul after this step. | + | {{: |
+ | <note important> | ||
+ | </ | ||
==== 6. Check whether templates are visible ==== | ==== 6. Check whether templates are visible ==== | ||
Check whether the Netflow template is displayed. This can be done by using Context: | Check whether the Netflow template is displayed. This can be done by using Context: | ||
Are the templates visible? | Are the templates visible? | ||
+ | |||
+ | {{: | ||
**Yes**. Move to next step. | **Yes**. Move to next step. | ||
Line 115: | Line 126: | ||
- Click on Save. | - Click on Save. | ||
- | You need to restart trisul | + | <note important> |
+ | </ | ||
==== 8. Analyse the captured flows ==== | ==== 8. Analyse the captured flows ==== | ||
You can analyse the captured flows using Wireshark tool.This can be done by, | You can analyse the captured flows using Wireshark tool.This can be done by, | ||
Line 124: | Line 135: | ||
</ | </ | ||
+ | {{: | ||
+ | |||
+ | - Check if you have mentioned the port number correctly. | ||
+ | - If not,then choose ' | ||
+ | - Change the port number(for eg.5111) and set to CFLOW. | ||
+ | |||
+ | {{: | ||
tips/netflow_troubleshooting.1584537789.txt.gz · Last modified: 2020/03/18 18:53 by navaneeth