Veteran Member
Posts: 6,097
Registered: ‎07-03-2008
Kudos: 1935
Solutions: 142

Netflow Data Stops Again

Once again, something is not right:

netflow-0915.pngnetflow-0916.pngnetflow-0917.png

 

Veteran Member
Posts: 6,097
Registered: ‎07-03-2008
Kudos: 1935
Solutions: 142

Re: Netflow Data Stops Again

UNMS (which only recently started recording flows) is also not receiving data:

unms-netflow-1day.png

 

This is looking like it may be some kind of EdgeOS issue, but we currently lack the tools needed to effectively diagnose this stuff.

Veteran Member
Posts: 6,097
Registered: ‎07-03-2008
Kudos: 1935
Solutions: 142

Re: Netflow Data Stops Again

As I suspected, EdgeOS stopped sending NetFlow data.  I understand this is not something UCRM (or UNMS) can control, but we desperately need some kind of monitoring of incoming NetFlow data.

Veteran Member
Posts: 6,097
Registered: ‎07-03-2008
Kudos: 1935
Solutions: 142

Re: Netflow Data Stops Again

We lost upload traffic a few days ago:

total-traffic-hover.png

 

I know UBB is coming, but we really do need some way of knowing when this data stops flowing...

Ubiquiti Employee
Posts: 4,050
Registered: ‎12-10-2015
Kudos: 1433
Solutions: 312

Re: Netflow Data Stops Again

This could be an issue of your edgeOS, you might discuss this in the ER forum.

However, you could upgrade to the latest edgeOS firmware, which could help. And regarding the NetFlow packet monitoring, you could use some tool like Wireshark
Veteran Member
Posts: 6,097
Registered: ‎07-03-2008
Kudos: 1935
Solutions: 142

Re: Netflow Data Stops Again

[ Edited ]

Yes, this was something in EdgeOS (v1.10.9 here) which silently stopped sending NetFlow data.  I issued a 'restart flow-accounting' command on the border router and the upload data once again is being reported.

 

UNMS v0.14.0 is supposed to include some basic monitoring for the presence of NetFlow data.