Ip Netstream doesn´t display traffic on Interface VLANif 1

1、could you please confirm whether you can get some result from other interface, such as GigabitEthernet0/0/4.1504.
2、whether you can ping the netstream server by using "ping -a 1.1.1.1 netstream-server-ip"

Dear Yjun,

I have the same problem at all subinterfaces. I have never got information from that.

The ping works fine

Hi,

1. Can you provide some details about the netstream collector and netstream analyzer? You are using eSight with NTA module?
2. Can you perform a packet capture on the server/analyzer side to understand whether the netstream packets are reaching to the server? it's best to confirm whether it's a problem with the client (NDE) or on the server
3. there is any firewall in the middle? The port configured for the export host(2055) should not be blocked.
4. it's possible to check whether "display ip netstream statistic" command show any statistics?
5. the sampling it's quite high, can you decrease to 20 or 30 packets instead of 1?

Hello my friend,

First of all, let me tell you thanks for your cooperation.

1. I´m using SolarWinds software with NTA module in order to analyze the netstream information.

2. That´s point it´s complicated for me, because the server isn´t under my responsibility. I can connect to server with terminal server as a reader. I checked the firewall and it is desconected. I set up a netstat -anob and I couldn´t see any connection with upd 2055 port.

3.There isn´t any firewall in the middle, although, I will try to check that with again.

4.<Router>disp ip netstream statistic
Origin ingress entries : 108870
Origin ingress packets : 370473
Origin ingress octets : 183357733
Origin egress entries : 106829
Origin egress packets : 388098
Origin egress octets : 225814948
Origin total entries : 215699
Agility ingress entries : 0
Agility ingress packets : 0
Agility ingress octets : 0
Agility egress entries : 0
Agility egress packets : 0
Agility egress octets : 0
Agility total entries : 0
Handle origin entries : 215698
Handle agility entries : 0
Handle As aggre entries : 0
Handle ProtPort aggre entries : 0
Handle SrcPrefix aggre entries : 0
Handle DstPrefix aggre entries : 0
Handle Prefix aggre entries : 0
Handle AsTos aggre entries : 0
Handle ProtPortTos aggre entries : 0
Handle SrcPreTos aggre entries : 0
Handle DstPreTos aggre entries : 0
Handle PreTos aggre entries : 0

5. I changed the sampling to 50
ip netstream sampler fix-packets 50 inbound
ip netstream sampler fix-packets 50 outbound
ip netstream inbound
ip netstream outbound

I don't have experience with implementing netstream with Solarwinds, but I would ask for help to the colleagues that manage the server.
1. Make sure RFC 3917 and RFC 3954 are supported by Solarwinds
2. Check which version of netstream Solarwinds supportes? If it's version 9, you must configure on Huawei side too.

if the counters of netstream statistics are increasing, it means that the agent is sending packets out.

Hi,

I confirm you that the counters of netstream statistics are increasing continously.

What means exactly "ip netstream sampler fix-packets 50 outbound" I´m not sure to understand correctly that.
At the same time, I opened a ticket to SolarWinds support.

Thanks a lot for your cooperation

ip netstream sampler fix-packets 50 outbound - the client will sample one packet from 50 going in outbound direction and put to the cache.
Previously you set it to 1, this means each packet will be sampled and put in the cache. This sampling is too agressive, cache could overload and export could be impacted.
Check the command reference for more information.
http://support.huawei.com/hedex/pages/EDOC110000658831189899/02/EDOC110000658831189899/02/resources/software/nev8r10_vrpv8r16/user/vrp/ip_netstream_sampler.html?ft=0&fe=10&hib=9.1.19.2.39&id=ip_netstream_sampler&text=ip%20netstream%20sampler&docid=EDOC1100006588

Thanks again for your support.

I hope as soon as posible to get information from SolarWinds support Team.

Have a good time!