Nagios Support Forum

Hello~ I tried to use Nagios Network Analyzer, but there're some problems.

I succeed to receive netflow from Cisco Catalyst 6509 model, but it's failed if I use Cisco Nexus 7010 model.
If I failed, it shows error message "The source appears to have irregular traffic at this time".
Is Any restriction to use Nagios Network Analyzer?

So, I investigated difference of packet structure. But I couldn't find obvious things except a few clue. Attachment is my
netflow packet comparision between Catalyst 6509 and Nexus 7010. I reallly need help~~~.

(In addition to Device difference, If I changed netflow export version from 5 to 9, it fails both devices.)

Your file that you tried to upload didn't get attached to the post so you may want to try uploading it again.

It takes about 20 minutes to capture enough data to graph, show the TOP 5, etc...
Are you receiving any kind of data now?
Can you upload your settings for the Cisco Nexus for Netflow?
Can you upload a screen capture of the error message?

Today I tested like below timeline.

6/5 08:30 (utc+9) - netflow export of catalyst6509 started (When I checked TopTalker between 8:45 ~ 8:50, it shows good result - netflow_toptalker_suc.png)
6/5 08:55 (utc+9) - netflow export of catalyst6509 stopped
6/5 09:00 (utc+9) - netflow export of nexus7010 started (When I checked TopTalker between 9:10 ~ 9:15, it shows nothing - netflow_toptalker_err.png)
6/5 09:40 (utc+9) - netflow export of nexus7010 stopped

"netflow.png" is dashboard page and it shows status changed red from 9:30 with irregular traffic error message. (I can't see normal result from 09:00 data)
attachment text file is configuration of both devices and packet structure. packet was captured at server side with tcpdump and decoded with wireshark cflow
template. If you need more informtion, plz let me know.

During the "irregular Traffic time" was the tcpdump still receiving data?

There also may be a Netflow version incompatibility with your devices so if you want to test an upgrade of the nfdump software on your NA server, you can follow the following procedure. After this, restart the NA server and see if the issue is resolved.

Finally, I solved problem. It was a basic mistake, I appreciated for your reply. It's not a problem regarding netflow version or device type.
When I used catalyst 6509, I put netflow both inbound and outbound, but I used only inbound netflow when I configure Nexus 7010. Everything works fine now
Thank you.

I'll be closing this thread now, but feel free to open another if you need anything in the future!