Nagios Network Analyzer Display Vlan and Interface
Posted: Tue Oct 28, 2025 5:05 pm
I am wondering if there is a way for the Nagios Network Analyzer web GUI to record/display Vlan and source interface (switch port interface) information. We have Cisco 9200s configured to send this information and it does reach the NNA side I can see it if I view the raw nfcapd info:
/usr/local/nagiosna/var/*redacted*/flows# nfdump -r nfcapd.202510281250 -o raw
Flow Record:
RecordCount = 162
Ident = 4
Flags = 0x00 NETFLOW v9, Unsampled
Elements = 5: 1 2 4 6 12
size = 116
engine type = 0
engine ID = 2
export sysid = 2
first = 1761670190000 [2025-10-28 12:49:50.000]
last = 1761670190000 [2025-10-28 12:49:50.000]
received at = 1761670218516 [2025-10-28 12:50:18.516]
proto = 17 UDP
tcp flags = 0x00 ........
src port = 61111
dst port = 61111
src tos = 0
fwd status = 0
in packets = 3
in bytes = 150
src addr = *redacted*
dst addr = 255.255.255.255
input = 56 GigabitEthernet2/1/1
output = 0 <no if name>
src mask = 0 /0
dst mask = 0 /0
dst tos = 0
direction = 0
biFlow Dir = 0x00
end reason = 0x00
src vlan = 11
dst vlan = 0
ip exporter = *redacted*
-Jordan
/usr/local/nagiosna/var/*redacted*/flows# nfdump -r nfcapd.202510281250 -o raw
Flow Record:
RecordCount = 162
Ident = 4
Flags = 0x00 NETFLOW v9, Unsampled
Elements = 5: 1 2 4 6 12
size = 116
engine type = 0
engine ID = 2
export sysid = 2
first = 1761670190000 [2025-10-28 12:49:50.000]
last = 1761670190000 [2025-10-28 12:49:50.000]
received at = 1761670218516 [2025-10-28 12:50:18.516]
proto = 17 UDP
tcp flags = 0x00 ........
src port = 61111
dst port = 61111
src tos = 0
fwd status = 0
in packets = 3
in bytes = 150
src addr = *redacted*
dst addr = 255.255.255.255
input = 56 GigabitEthernet2/1/1
output = 0 <no if name>
src mask = 0 /0
dst mask = 0 /0
dst tos = 0
direction = 0
biFlow Dir = 0x00
end reason = 0x00
src vlan = 11
dst vlan = 0
ip exporter = *redacted*
-Jordan