OPNsense Forum

English Forums => 25.7 Series => Topic started by: planetf1 on July 23, 2025, 08:11:33 PM

Title: netflow on 25.7
Post by: planetf1 on July 23, 2025, 08:11:33 PM
With 25.7 I don't seem to be able to get netflow working.

- destination is set to 127.0.0.1:2056
- lan, wan are listening
- wan interface is 'wan'
- local capture is selected
- using v9
- insight aggregator/netflow distributor are running (and has been restarted)
- I've reset the rrd & netflow data

I still don't seem to get any data showing up under reporting->insight

I cannot 'telnet 127.0.0.1:2056'

I do have a large flowd.log file
Title: Re: netflow on 25.7
Post by: RutgerDiehard on July 23, 2025, 08:53:01 PM
Yes, I see the same after upgrading to 25.7; nothing in Reporting -> Insight at all.

Title: Re: netflow on 25.7
Post by: plebe on July 23, 2025, 09:22:15 PM
+1
Title: Re: netflow on 25.7
Post by: db9 on July 23, 2025, 09:30:47 PM
+1
Title: Re: netflow on 25.7
Post by: Gronkdalonka on July 23, 2025, 09:55:53 PM
+1
Title: Re: netflow on 25.7
Post by: epyon9283 on July 24, 2025, 02:11:52 AM
+1
Title: Re: netflow on 25.7
Post by: OPNenthu on July 24, 2025, 04:28:51 AM
It's just the Insight->Totals and Insight->Details views which are coming up blank for me.

I see that the .csv file exports from Insight do contain data for today's date.
Title: Re: netflow on 25.7
Post by: Monviech (Cedrik) on July 24, 2025, 08:52:43 AM
I'm giving this a look and see if I can find anything weird going on.
Title: Re: netflow on 25.7
Post by: GreenMatter on July 24, 2025, 12:14:02 PM
+1
Title: Re: netflow on 25.7
Post by: JDabbs on July 24, 2025, 12:55:22 PM
+1
Title: Re: netflow on 25.7
Post by: andrema2 on July 24, 2025, 03:22:41 PM
Same thing. I have repair and reset the netflow data and it didn't solve it
Title: Re: netflow on 25.7
Post by: jerry.faircloth@gmail.com on July 24, 2025, 03:25:57 PM
+1  Tried bouncing flowd service, clearing all netflow data and restart, restored RRD data after restart, zip, nothing shows up in insight graph any more.
Title: Re: netflow on 25.7
Post by: Monviech (Cedrik) on July 24, 2025, 04:03:41 PM
It was a regression accidentally caused in the camelCase to snake_case conversion.

Can somebody try:

opnsense-patch https://github.com/opnsense/core/commit/bc03efcef593f0e5235c1e1003b701e7b003d5ce
Title: Re: netflow on 25.7
Post by: gpb on July 24, 2025, 04:06:21 PM
That fixed it.  :)
Title: Re: netflow on 25.7
Post by: jerry.faircloth@gmail.com on July 24, 2025, 04:29:41 PM
Yep I also confirm that fixed it.  Thanks for the fast support!
Title: Re: netflow on 25.7
Post by: gpfountz on July 24, 2025, 05:51:35 PM
confirmed the patch resolved the issue for me as well.
Title: Re: netflow on 25.7
Post by: planetf1 on July 24, 2025, 06:40:35 PM
and also confirmed here (op)!
Title: Re: netflow on 25.7
Post by: JDabbs on July 24, 2025, 06:46:59 PM
Same here patch worked perfectly.

Fantastic verry quick response, a big tank you for all your hard work it really is appreciated.
Title: Re: netflow on 25.7
Post by: nemric on July 24, 2025, 09:49:03 PM
works fine :) thanks ;)
Title: Re: netflow on 25.7
Post by: gogolathome on July 27, 2025, 09:54:42 AM
Is this patch still working for you all?
Because immediately after patching it looks ok, but a few minutes later I am seeing "undefined" again.
Title: Re: netflow on 25.7
Post by: OPNenthu on July 27, 2025, 10:27:53 AM
Did you by chance apply it more than once?  According to 'man opnsense-patch', applying it a second time reverts the change.
Title: Re: netflow on 25.7
Post by: gogolathome on July 27, 2025, 11:25:23 AM
Quote from: OPNenthu on July 27, 2025, 10:27:53 AMDid you by chance apply it more than once?  According to 'man opnsense-patch', applying it a second time reverts the change.
No. I checked the file "networkinsight.volt" too. And now it is working again. Maybe I was too fast ;)
Edit: after a new login "undefined" again. It is intermittent.
Title: Re: netflow on 25.7
Post by: OPNenthu on July 27, 2025, 01:58:02 PM
Hmm, I am seeing some strangeness, but I'm not sure if this is how Insight behaves normally or not.

I'm seeing that the graph totals will randomly nosedive (but not all the way to zero).  Some much low(er) counts will show until a later time (>30 min.) when the chart total suddenly gets adjusted. 

This shows the issue between about 7:15am and 7:45am local time.  The chart scale hasn't changed, but the data in that time period has.

A.png

B.png

---


EDIT: I just observed the same thing again between 8:15-8:45... so it seems that 30 min. is just the interval that Insight graphs get updated.  Nothing to see here in that case.

Anyway, I for one am not seeing the original issue since applying the patch.
Title: Re: netflow on 25.7
Post by: Tealk on July 27, 2025, 03:01:57 PM
Patch bc03efcef593f0e5235c1e1003b701e7b003d5ce also worked for me
Title: Re: netflow on 25.7
Post by: TS79 on July 29, 2025, 01:08:03 PM
Thanks for the patch - that's fixed it for me. After hours of checking logs, flowd service health, etc... Thank you :)
Title: Re: netflow on 25.7
Post by: lUomino on July 29, 2025, 09:09:59 PM
The patch also worked for me. I had to go to Reporting > Settings and clean things up, though.

One word of caution to those who come after--my disk filled up with netflow data in a few days, so I suggest that you either apply the patch, turn off netflow, or downgrade until this is fixed.
Title: Re: netflow on 25.7
Post by: wincent on August 01, 2025, 05:56:05 AM
Works for me too.
But before that, I tried to reset RRD data/NetFlow data, repair NetFlow data.
I lost all the data from the past few years.
:(
Title: Re: netflow on 25.7
Post by: lUomino on August 01, 2025, 03:33:35 PM
Did this patch make it into 25.7.1? The patch notes did refer to netflow, but used different language than in this thread.
Title: Re: netflow on 25.7
Post by: franco on August 01, 2025, 08:33:35 PM
https://github.com/opnsense/changelog/blob/0dd232860901098b633e6505179a9f3c98001604/community/25.7/25.7.1#L12