[c-nsp] 6500 NDE aging "prematurely"

Phil Mayers p.mayers at imperial.ac.uk
Wed Jun 4 09:37:31 EDT 2008


Ben Hicks wrote:
>  From 
> http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6555/ps6601/prod_white_paper0900aecd80406232.html
> 
> -The NetFlow cache is constantly filling with flows and software in the 
> router or switch is searching the cache for flows that have terminated 
> or expired and these flows are exported to the NetFlow collector server. 
> Flows are terminated when the network communication has ended (ie: a 
> packet contains the TCP FIN flag). The following steps are used to 

Ok, this appears to be the key.

I was under the impression that the 6500 PFC/DFC were not TCP-flag 
aware, however as you say, testing indicates they are.

Thanks all.


More information about the cisco-nsp mailing list