Got it

Ip Netstream doesn´t display traffic on Interface VLANif 1

Created: Jul 9, 2018 14:30:28Latest reply: Jul 12, 2018 08:22:25 1595 8 0 0 0
  Rewarded HiCoins: 0 (problem resolved)
Dear Colleague,

I´m trying to get information throught IP Netstream from interface Vlanif1. But I cannot get nothing.

I show you my netstream configuration in order to get help from someone. Please, could you help me?

interface Vlanif1
 set flow-stat interval 30
 tcp adjust-mss 1460
 ip address 1.1.1.1 255.255.255.0
 clear ip df
 ip netstream sampler fix-packets 1 inbound
 ip netstream sampler fix-packets 1 outbound
 ip netstream inbound
 ip netstream outbound
 dhcp select relay
 dhcp relay server-ip X.X.X.X
 dhcp relay server-ip X.X.X.X
#
interface Ethernet0/0/0
#
interface GigabitEthernet0/0/0
#                                         
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
 set flow-stat interval 30
 combo-port auto
#
interface GigabitEthernet0/0/4.1500
 description WAN-PPAL
 set flow-stat interval 30
 dot1q termination vid 1500
 ip address X.X.X.X
 ip netstream inbound
 ip netstream outbound
 qos gts cir 120000 cbs 1500000
#                                         
interface GigabitEthernet0/0/4.1504
 set flow-stat interval 30
 dot1q termination vid 1504
 ip address X.X.X.X
 ip netstream inbound
 ip netstream outbound
 qos gts cir 192 cbs 4800
#
 ip netstream timeout active 5 
 ip netstream timeout inactive 10 
 ip netstream export source ROUTER IP  
 ip netstream export host SERVER 2055



  • x
  • convention:

Featured Answers
StarOfWest
Created Jul 10, 2018 07:32:41

Hi,

1. Can you provide some details about the netstream collector and netstream analyzer? You are using eSight with NTA module?
2. Can you perform a packet capture on the server/analyzer side to understand whether the netstream packets are reaching to the server? it's best to confirm whether it's a problem with the client (NDE) or on the server
3. there is any firewall in the middle? The port configured for the export host(2055) should not be blocked.
4. it's possible to check whether "display ip netstream statistic" command show any statistics?
5. the sampling it's quite high, can you decrease to 20 or 30 packets instead of 1?
View more
  • x
  • convention:

All Answers
yjun111
yjun111 Created Jul 9, 2018 14:39:38

1、could you please confirm whether you can get some result from other interface, such as GigabitEthernet0/0/4.1504.
2、whether you can ping the netstream server by using "ping -a 1.1.1.1 netstream-server-ip"
View more
  • x
  • convention:

datojo
datojo Created Jul 9, 2018 15:46:31

Dear Yjun,

I have the same problem at all subinterfaces. I have never got information from that.

The ping works fine

View more
  • x
  • convention:

StarOfWest
StarOfWest Created Jul 10, 2018 07:32:41

Hi,

1. Can you provide some details about the netstream collector and netstream analyzer? You are using eSight with NTA module?
2. Can you perform a packet capture on the server/analyzer side to understand whether the netstream packets are reaching to the server? it's best to confirm whether it's a problem with the client (NDE) or on the server
3. there is any firewall in the middle? The port configured for the export host(2055) should not be blocked.
4. it's possible to check whether "display ip netstream statistic" command show any statistics?
5. the sampling it's quite high, can you decrease to 20 or 30 packets instead of 1?
View more
  • x
  • convention:

datojo
datojo Created Jul 10, 2018 09:23:57

Hello my friend,

First of all, let me tell you thanks for your cooperation.

1. I´m using SolarWinds software with NTA module in order to analyze the netstream information.

2. That´s point it´s complicated for me, because the server isn´t under my responsibility. I can connect to server with terminal server as a reader. I checked the firewall and it is desconected. I set up a netstat -anob and I couldn´t see any connection with upd 2055 port.

3.There isn´t any firewall in the middle, although, I will try to check that with again.

4.<Router>disp ip netstream statistic
Origin ingress entries : 108870
Origin ingress packets : 370473
Origin ingress octets : 183357733
Origin egress entries : 106829
Origin egress packets : 388098
Origin egress octets : 225814948
Origin total entries : 215699
Agility ingress entries : 0
Agility ingress packets : 0
Agility ingress octets : 0
Agility egress entries : 0
Agility egress packets : 0
Agility egress octets : 0
Agility total entries : 0
Handle origin entries : 215698
Handle agility entries : 0
Handle As aggre entries : 0
Handle ProtPort aggre entries : 0
Handle SrcPrefix aggre entries : 0
Handle DstPrefix aggre entries : 0
Handle Prefix aggre entries : 0
Handle AsTos aggre entries : 0
Handle ProtPortTos aggre entries : 0
Handle SrcPreTos aggre entries : 0
Handle DstPreTos aggre entries : 0
Handle PreTos aggre entries : 0

5. I changed the sampling to 50
ip netstream sampler fix-packets 50 inbound
ip netstream sampler fix-packets 50 outbound
ip netstream inbound
ip netstream outbound
View more
  • x
  • convention:

StarOfWest
StarOfWest Created Jul 10, 2018 11:47:00

I don't have experience with implementing netstream with Solarwinds, but I would ask for help to the colleagues that manage the server.
1. Make sure RFC 3917 and RFC 3954 are supported by Solarwinds
2. Check which version of netstream Solarwinds supportes? If it's version 9, you must configure on Huawei side too.

if the counters of netstream statistics are increasing, it means that the agent is sending packets out.
View more
  • x
  • convention:

datojo
datojo Created Jul 10, 2018 14:18:13

Hi,

I confirm you that the counters of netstream statistics are increasing continously.

What means exactly "ip netstream sampler fix-packets 50 outbound" I´m not sure to understand correctly that.
At the same time, I opened a ticket to SolarWinds support.

Thanks a lot for your cooperation
View more
  • x
  • convention:

StarOfWest
StarOfWest Created Jul 11, 2018 12:50:48

ip netstream sampler fix-packets 50 outbound - the client will sample one packet from 50 going in outbound direction and put to the cache.
Previously you set it to 1, this means each packet will be sampled and put in the cache. This sampling is too agressive, cache could overload and export could be impacted.
Check the command reference for more information.
http://support.huawei.com/hedex/pages/EDOC110000658831189899/02/EDOC110000658831189899/02/resources/software/nev8r10_vrpv8r16/user/vrp/ip_netstream_sampler.html?ft=0&fe=10&hib=9.1.19.2.39&id=ip_netstream_sampler&text=ip%20netstream%20sampler&docid=EDOC1100006588
View more
  • x
  • convention:

datojo
datojo Created Jul 12, 2018 08:22:25

Thanks again for your support.

I hope as soon as posible to get information from SolarWinds support Team.

Have a good time!
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.