Troubleshooting Tips When Using Paessler NetFlow Generator
1. Verify network connectivity
- Ping the target collector IP and confirm no packet loss.
- Traceroute to detect routing issues or unexpected hops.
2. Check collector settings
- Port: Ensure the collector is listening on the same UDP port the generator sends to (default often ⁄2056 or configured value).
- Protocol/version: Match NetFlow/IPFIX version between generator and collector.
- Firewall: Confirm UDP port is open on collector and intermediate firewalls.
3. Confirm generator configuration
- Destination IP/Port: Correct target and port entered.
- Flow templates: For IPFIX/NetFlow v9, ensure template packets are being sent and accepted.
- Export interval & flow sizes: Use moderate rates initially to avoid overwhelming the collector.
4. Monitor for packet loss and rate limits
- Use packet captures (tcpdump/wireshark) on the collector to see incoming flow packets and templates.
- Watch CPU/memory on collector and generator hosts; high load can drop UDP packets.
- Reduce send rate or increase batching if drops occur.
5. Validate packet format and timestamps
- Inspect sample packets in Wireshark to confirm field layout and timestamps are valid for your collector.
- Time synchronization: Ensure NTP is running on both machines so timestamps align.
6. Template and field mismatches
- Resend templates periodically; some collectors require fresh templates after restarts.
- Verify enterprise/vendor fields and IDs; custom fields must map correctly on the collector.
7. Check logs and error messages
- Generator logs: Look for send errors or rate-limit warnings.
- Collector logs: Look for template errors, checksum/parse failures, or rejected packets.
8. Isolate and reproduce
- Test locally: Run a local collector on the generator machine to confirm output correctness.
- Simplify flows: Send a single, low-rate flow to confirm end-to-end functionality before scaling.
9. Update software and firmware
- Use latest stable versions of Paessler NetFlow Generator and collector software to avoid known bugs.
- Review release notes for fixes related to templates, IPFIX, or high-rate exporting.
10. Contact support with diagnostics
- Gather: generator version, collector type/version, packet captures, configuration files, and logs. Share these with Paessler or your collector vendor for targeted help.
Brief, prioritized checks: confirm connectivity and matching port/version, capture packets to verify templates and payloads, monitor for packet loss/rate issues, and review logs—these steps resolve most NetFlow generator problems.
Leave a Reply