No data being recieved by NNA - Linux/fprobe

[talfano]

We have installed fprobe on our linux server and I have created a NNA source on the server for port 2707.

The following process is running on the Linux server which should be sending NetFlow Data to the Nagios server:

root 6208 0.0 0.0 55776 5636 ? Ssl 14:28 0:00 /usr/local/sbin/fprobe -i bond0 172.20.100.209:2707

The Nagios Server says "no Data"

a tcpdump is not picking up any packets destined for 2707:

tcpdump -i bond0 | grep 2707

I would appreciate some advise on how to proceed.

[tgriep]

Are you running the tcpdump on the sending server or receiving server?

[HduarteEservices]

We have installed fprobe on our linux server and I have created a NNA source on the server for port 2707.

The following process is running on the Linux server which should be sending NetFlow Data to the Nagios server:

root 6208 0.0 0.0 55776 5636 ? Ssl 14:28 0:00 /usr/local/sbin/fprobe -i bond0 172.20.100.209:2707

The Nagios Server says "no Data"

a tcpdump is not picking up any packets destined for 2707:

tcpdump -i bond0 | grep 2707

I would appreciate some advise on how to proceed.

Same problem here, i've installed just as the tutorial says. step by step.

can someone help us out.

[tgriep]

Make sure the firewall is disabled on the NNA server or that the port you selected is allowing inbound UDP traffic to the port you specified in the fprobe command.
Check that and post back if you have any more questions.

[concise]

I have a similar issue where more than 5 sources are sending data perfectly and only one of those has issues. I'm not able to tell if it is an issue with the sender or the receiver as the firewall, etc are configured correctly. I have been watching the port 1104 on NNA using tcpdump but no sign of data being received.

Is there a command I can use to see if the data is being sent from the sender on port 1104?

[tgriep]

If the sender is a linux system, you can run the following as root to see if fprobe it running and sending to the correct IP and port.

Code: Select all

ps -ef |grep fprobe