How to Verify Orion / Kiwi Syslog receiving (NetFlow port 2055) / (Traps port 162 ) / ( Syslog port 514 ) Traffic on required ports

First you will have to make sure you have configured your device correctly to send  required Traffic on Orion server IP & Port .

If you still not able to see the traffic within Orion application please follow the steps below in order to filter and verify the traffic is actually been received at Orion port.

For this you will have to install the Wireshark as below.

Download Wireshark and install on Orion Server .

Wireshark · Download

Make Sure Windows Firewall Disabled on Orion Server / OR Create a Rule in Windows Firewall to allow port traffic in some cases i have found the Windows Firewall blocking the traffic to the service  even the traffic can bee seen in the  Wireshark

Click > Capture >Interfaces > Select "Required " Correct interface >

Now apply required filter.

Change the IP  in filter of Node which is sending Netflow to Orion (Cisco / Juniper / Switch / Router ) and apply.

ip.src == 192.168.1.1 && upd.port == 2055

OR

udp.port == 2055

click apply .

Are you able to see Flows from the Node like (Cflow (for Cisco )/ Jflow for Juniper  / Sflow )  ?

if no packet please check your device or network for further troubleshooting as this will confirm that

Orion is not receiving any packet hitting NTA default port 2055 .

******************** Use following for Traps / Syslog filter in Wireshark as above example *************

For Traps

ip.src == 192.168.1.1 && udp.port ==162

OR

udp.port == 162

For Syslog

ip.src == 192.168.1.1 && udp.port == 514

OR

udp.port == 514

For more details please find 

SolarWinds Technical Reference Troubleshooting NetFlow

http://www.solarwinds.com/documentation/ref/NetFlowTroubleshooting.pdf