Nagios Network Analyzer Display Vlan and Interface

[smithjor]

I am wondering if there is a way for the Nagios Network Analyzer web GUI to record/display Vlan and source interface (switch port interface) information. We have Cisco 9200s configured to send this information and it does reach the NNA side I can see it if I view the raw nfcapd info:

/usr/local/nagiosna/var/*redacted*/flows# nfdump -r nfcapd.202510281250 -o raw

Flow Record:
RecordCount = 162
Ident = 4
Flags = 0x00 NETFLOW v9, Unsampled
Elements = 5: 1 2 4 6 12
size = 116
engine type = 0
engine ID = 2
export sysid = 2
first = 1761670190000 [2025-10-28 12:49:50.000]
last = 1761670190000 [2025-10-28 12:49:50.000]
received at = 1761670218516 [2025-10-28 12:50:18.516]
proto = 17 UDP
tcp flags = 0x00 ........
src port = 61111
dst port = 61111
src tos = 0
fwd status = 0
in packets = 3
in bytes = 150
src addr = *redacted*
dst addr = 255.255.255.255
input = 56 GigabitEthernet2/1/1
output = 0 <no if name>
src mask = 0 /0
dst mask = 0 /0
dst tos = 0
direction = 0
biFlow Dir = 0x00
end reason = 0x00
src vlan = 11
dst vlan = 0
ip exporter = *redacted*

-Jordan

[sgardil]

I am wondering if there is a way for the Nagios Network Analyzer web GUI to record/display Vlan and source interface (switch port interface) information. We have Cisco 9200s configured to send this information and it does reach the NNA side I can see it if I view the raw nfcapd info:

/usr/local/nagiosna/var/*redacted*/flows# nfdump -r nfcapd.202510281250 -o raw

Flow Record:
RecordCount = 162
Ident = 4
Flags = 0x00 NETFLOW v9, Unsampled
Elements = 5: 1 2 4 6 12
size = 116
engine type = 0
engine ID = 2
export sysid = 2
first = 1761670190000 [2025-10-28 12:49:50.000]
last = 1761670190000 [2025-10-28 12:49:50.000]
received at = 1761670218516 [2025-10-28 12:50:18.516]
proto = 17 UDP
tcp flags = 0x00 ........
src port = 61111
dst port = 61111
src tos = 0
fwd status = 0
in packets = 3
in bytes = 150
src addr = *redacted*
dst addr = 255.255.255.255
input = 56 GigabitEthernet2/1/1
output = 0 <no if name>
src mask = 0 /0
dst mask = 0 /0
dst tos = 0
direction = 0
biFlow Dir = 0x00
end reason = 0x00
src vlan = 11
dst vlan = 0
ip exporter = *redacted*

-Jordan

Hey Jordan

Currently NNA's GUI doesn't have a way to display this information. I can make a feature request to add more robust data to display. Is there an area you would like to see this at? I am thinking queries currently but im not sold. Is there more information along side the src vlan and interface?

[smithjor]

Hello,

I think we would like to see this when viewing a source or in a query if possible.

Thanks!

[sgardil]

Hello,

I think we would like to see this when viewing a source or in a query if possible.

Thanks!

Got it, I made an issue for tracking this. I can't give a time frame for when it will be done but it will be listed under issue number 131.