In general does each Netflow sensor need to receive data on a different TCP port? We have multiple routers with multiple interfaces and we are setting each interface on each router to send Netflow traffic to the same probe but each on a different TCP port. This means we will have about 30 different ports used for Netflow traffic. If we have a Router with two interfaces then I assume we have to enable Netflow on both interfaces and then have it sent to our probe.
Article Comments
I've noticed that PRTG does not pay attention to the Netflow exporter IP or the source interface. It only identifies individual streams by TCP listener port number. I like this because it allows me to aggregate all of my netflow traffic by having all routers sending to the same port. This makes it quite easy to track a single client's data usage across all of our internet feeds for monthly bills (I think our accounting dept likes PRTG more than we do these days).
If you need to uniquely identify each NDE router interface, then each interface needs to be sending to a unique TCP port.
Jun, 2010 - Permalink
If you want to differ traffic for the individual devices then each device should send on a different port.
If you want to receive NetFlow data from all interfaces you need to configure this on the device.
Jun, 2010 - Permalink