Community discussions

MikroTik App
 
msaini
just joined
Topic Author
Posts: 13
Joined: Mon Jul 27, 2020 6:02 pm

Mikrotik - Traffic Flow- Getting only RX traffic  [SOLVED]

Fri Mar 19, 2021 4:49 pm

Hello Guys,

I want to manage the RBM33G router via IPSEC. I am using LTE as a wan.
I am sending all the management data over IPSec . I am able to achieve everything but the only issue is my net flow tool is showing RX traffic only.
I am also able to ping my net flow target IP via ipsec
Below is the config

/ip ipsec policy
add dst-address=0.0.0.0/0 peer="IPSEC PEER " sa-dst-address=x.x.x.x sa-src-address=25.132.51.52 src-address=\
192.168.9.0/29 tunnel=yes
/ip address
add address=192.168.9.1/29 interface="Management LAN" network=192.168.9.0
/ip route
add distance=1 dst-address=221.171.89.112/32 gateway=lte1 pref-src=192.168.9.1

/ip traffic-flow
set enabled=yes
/ip traffic-flow target
add dst-address=221.171.89.112


/ip traffic-flow print
enabled: yes
interfaces: all
cache-entries: 64k
active-flow-timeout: 30m
inactive-flow-timeout: 15s


> ping 221.171.89.112
SEQ HOST SIZE TTL TIME STATUS
0 221.171.89.112 56 62 51ms
1 221.171.89.112 56 62 46ms
2 221.171.89.112 56 62 67ms
3 221.171.89.112 56 62 48ms
sent=4 received=4 packet-loss=0% min-rtt=46ms avg-rtt=53ms max-rtt=67ms
 
msaini
just joined
Topic Author
Posts: 13
Joined: Mon Jul 27, 2020 6:02 pm

Re: Mikrotik - Traffic Flow- Getting only RX traffic

Sat Mar 20, 2021 8:44 am

Can anyone please help here
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 3291
Joined: Sat Dec 24, 2016 11:17 am
Location: Magrathean

Re: Mikrotik - Traffic Flow- Getting only RX traffic

Sat Mar 20, 2021 9:10 am

I do get traffic both way in my Splunk for Mikrotik setup (see my signature)
Not sure why you do see traffic only one way. Try FTP and transfer a larger file both way, you should see what are going on.

PS do not get to attached to Traffic Flow. MikroTik has removed this function in v7x of RouterOS.
 
User avatar
jvanhambelgium
Forum Veteran
Forum Veteran
Posts: 985
Joined: Thu Jul 14, 2016 9:29 pm
Location: Belgium

Re: Mikrotik - Traffic Flow- Getting only RX traffic

Sat Mar 20, 2021 9:23 am

@Jotne, Mikrotik will remove IP-accounting in v7, as far as I know , Netflow will not be removed I may hope...
Above example clearly seems Netflow based based on the config.

@msaini, hope you are not running a very old release ?

""Starting 6.0rc14 release setting interface will show RX and TX for the interface. Previously traffic-flow reported only RX fraffic for the interface and to see bidirecional data it was required to set up more interfaces""
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 3291
Joined: Sat Dec 24, 2016 11:17 am
Location: Magrathean

Re: Mikrotik - Traffic Flow- Getting only RX traffic

Sat Mar 20, 2021 12:08 pm

@ jvanhambelgium
You are 100% correct. I am wrong here. Netflow will stay. IP accounting are removed in 7.x beta.
 
msaini
just joined
Topic Author
Posts: 13
Joined: Mon Jul 27, 2020 6:02 pm

Re: Mikrotik - Traffic Flow- Getting only RX traffic

Mon Mar 22, 2021 7:55 am

Thanks for the reply guys,

My current firmware is 6.48
 
User avatar
jvanhambelgium
Forum Veteran
Forum Veteran
Posts: 985
Joined: Thu Jul 14, 2016 9:29 pm
Location: Belgium

Re: Mikrotik - Traffic Flow- Getting only RX traffic

Mon Mar 22, 2021 8:42 am

Thanks for the reply guys,

My current firmware is 6.48
Then open a ticket. What version of Netflow are you using ? v5 / v9 / IPFIX
Long time ago I opened a ticket due to a structural problem on IPFIX, it was never fixed.
I'm currently using basic v5 , but here on 6.47.7 I seem to be getting both Rx/Tx values into Splunk.
 
msaini
just joined
Topic Author
Posts: 13
Joined: Mon Jul 27, 2020 6:02 pm

Re: Mikrotik - Traffic Flow- Getting only RX traffic

Fri Mar 26, 2021 8:16 pm

Guys,
I found the issue here.
So My local lan IP on ntop is showing the TX traffic and RX traffic is showing on WAN IP of my LTE.
I have attached an image showing connections
SRC IP is : 1.1.1.2 ( local Lan)
Reply Destination IP is : 192.168.255.48 ( WAN IP)
Maybe cause of natting.

Reply destination IP should be the same LAN IP

Any Suggestions to fix this ?
You do not have the required permissions to view the files attached to this post.
 
msaini
just joined
Topic Author
Posts: 13
Joined: Mon Jul 27, 2020 6:02 pm

Re: Mikrotik - Traffic Flow- Getting only RX traffic

Fri Mar 26, 2021 9:41 pm

Fixed it.. guys

Just changed the version to 5

😀👍
 
User avatar
jvanhambelgium
Forum Veteran
Forum Veteran
Posts: 985
Joined: Thu Jul 14, 2016 9:29 pm
Location: Belgium

Re: Mikrotik - Traffic Flow- Getting only RX traffic

Fri Mar 26, 2021 10:27 pm

Fixed it.. guys

Just changed the version to 5

😀👍
Like I told you before, indeed Netflow v5 seems to work "OK" and at least has a minimum of info in it.
There are more things on Mikrotik that "kind of work" but are not implemented fully...

Who is online

Users browsing this forum: Google [Bot], GoogleOther [Bot] and 72 guests