How to Verify Orion receiving (NetFlow port 2055) / (Traps port 162 ) / ( Syslog port 514 ) Traffic on required ports

Download Wireshark and install on Orion Server .

Wireshark · Download

Make Sure Windows Firewall Disabled on Orion Server / OR Create a Rule in Windows Firewall to allow port traffic in some cases i have found the Windows Firewall blocking the traffic to the service  even the traffic can bee seen in the  Wireshark

Click > Capture >Interfaces > Select "Required " Correct interface >

Now apply required filter.

Change the IP  in filter of Node which is sending Netflow to Orion (Cisco / Juniper / Switch / Router ) and apply.

ip.addr == 192.168.168.168 && upd.port == 2055

click apply .

Are you able to see Flows from the Node like (Cflow (for Cisco )/ Jflow for Juniper  / Sflow )  ?

if no packet please check your device or network for further troubleshooting as this will confirm that

Orion is not receiving any packet hitting NTA default port 2055 .

******************** Use following for Traps / Syslog filter in Wireshark as above example *************

For Traps

ip.addr == 192.168.168.168 && upd.port ==162

OR

udp.port == 162

For Syslog

ip.addr == 192.168.168.168 && upd.port == 514

OR

udp.port == 514