[nsp] Sup720 and ACL/netflow processing

Mark Boolootian booloo at ucsc.edu
Wed Dec 17 18:45:04 EST 2003


I'm collecting netflow on a couple of Cat6503s with 
sup720s.  We've got input ACLs on the interfaces facing
our provider.  Back when this was a 7500, I'd get netflow
stats for all the inbound traffic, including the packets
that were denied by the input ACL.  However, on the sup720s,
it seems that the packets are dropped by the ACL before the
flows are recorded, and they don't show up in the netflow
export.

Can anyone confirm this behavior?


More information about the cisco-nsp mailing list