Hi you are correct ! It sends what appears to be standard Netflow V9 data to the collector and I captured it using Wireshark to our Solarwinds netflow collector however the engineer at solarwinds explained that the exporting process periodically resends templates to ensure that the collecting processes have received them. While IPFIX does provide a sequence numbering facility to allow a collecting process ( in this case Solarwinds ) to roughly estimate how many flow records have been lost during export over UDP this does not protect templates. So a collecitng process that loses a template in the middle of the export may be unable to interpret any flow records until the next template re transmission. Quite a mouthul! This article explains it all: https://is.muni.cz/repo/1181098/flow-monitoring-explained-paper.pdf Upshot is Solarwinds does not understand the Meraki Netflow data and its only Meraki can fix it by the sounds of it! This is a major issue for some companies that use Netflow extensively on first and second line support desks! Over to you Mr Meraki.
... View more