In sFlow sensor PRTG expect in 'Sender IP address' field the IP address of outgoing interface on destination machine(which we want to monitor). The problem is that when the routing will change then outgoing interface(source IP) can change as well and sensor will not be able to recognize the traffic even though it is coming from the same machine as before routing change. Changing 'Sender IP address' from outgoing interface to agentIP will resolve this issue because agent IP indicate uniquely the source of sFlow stream and is independent from the routing.


Article Comments

Hello,

thank you for your input.

PRTG comes with basic flow analysis capabilities, but is not made to be a fully-fledged flow analysis tool. For this, other tools are available like Scrutinizer.


Jun, 2022 - Permalink