[j-nsp] Junos MX series and Andrisoft Flow tools

[Jordan Whited]

If clocks are sync’d my best guess would be that your active and/or inactive flow timeouts are longer than what is configured on the collector and it doesn’t like that.

Try making them match the collector and if that doesn’t work make the MX timeouts slightly shorter.

http://www.juniper.net/documentation/en_US/junos12.3/topics/task/configuration/services-ipfix-flow-template-flow-aggregation-configuring.html <http://www.juniper.net/documentation/en_US/junos12.3/topics/task/configuration/services-ipfix-flow-template-flow-aggregation-configuring.html>


> On Jan 25, 2015, at 11:15 PM, John Brown <john at citylinkfiber.com> wrote:
> 
> Hi Paul,
> 
> Yes all devices sync to the same internal NTP servers and are set for
> the same TZ.
> 
> On Sun, Jan 25, 2015 at 8:40 PM, Paul S. <contact at winterei.se> wrote:
>> Just as a thought, do both systems have time synchronized with something
>> like ntp?
>> 
>> I've found that it helps to use the same timezone on the system hosting
>> WANGuard as well as the routers (You should technically be using UTC anyway)
>> 
>> On 1/26/2015 午前 06:34, John Brown wrote:
>>> 
>>> Hi,
>>> 
>>> I'm looking for advise on configuring our MX480 (Junos 12.3R4.6) to
>>> support
>>> IPFIX flows for Andrisoft's WanGuard flow based tools.  They only have
>>> samples for M series and that C company.
>>> 
>>> I'm getting some errors on the Andrisoft console that make me wonder if I
>>> have things set right.
>>> 
>>> The MX is feeding multiple 10Gig links and a pile of 1 Gig links, both
>>> IPv4
>>> and IPv6
>>> 
>>> Many thanks for pointers and help....
>>> 
>>> here is the error I get on the Andrisoft console
>>> Wrong flow timeout settings! Received flow from 391 seconds in the past!
>>> 16
>>> flows discarded
>>> _______________________________________________
>>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>>> https://puck.nether.net/mailman/listinfo/juniper-nsp
>> 
>> 
>> _______________________________________________
>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/juniper-nsp
> 
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp