[c-nsp] Netflow export from 6500 w/sup-720

[Nicolaj Ottsen]

>Your only going to get flows created for packets L3 switched between
interfaces. 
>Have you looked to see how many entries are in the netflow table?

#sh mls netflow ip count 
Displaying Netflow entries in Supervisor Earl

 Number of shortcuts = 96722

>What does the output of "show mls nde" indicate?

#show mls nde
 Netflow Data Export enabled 
 Exporting flows to  x.x.x.x (xxxx)
 Exporting flows from x.x.x.x (58704)
 Version: 5
 Include Filter not configured 
 Exclude Filter not configured 
 Total Netflow Data Export Packets are:
    21649326 packets, 0 no packets, 627830483 records
 Total Netflow Data Export Send Errors:
        IPWRITE_NO_FIB = 0
        IPWRITE_ADJ_FAILED = 0
        IPWRITE_PROCESS = 0
        IPWRITE_ENQUEUE_FAILED = 0
        IPWRITE_IPC_FAILED = 0
        IPWRITE_OUTPUT_FAILED = 0
        IPWRITE_MTU_FAILED = 0
        IPWRITE_ENCAPFIX_FAILED = 0
 Netflow Aggregation Disabled 


Seems normal, but "sh mls netflow creation" IPv4 seems a litle odd to
me, is that normal.

#sh mls netflow creation 
 Netflow creation mode: 
  IPv4: unknown
  IPv6: always-create
  MPLS: always-create
  Mcst: always-create
  L2  : always-create



At 04:20 PM 8/22/2004 +0200, Nicolaj Ottsen wrote:

> >do you have ip route-cache flow enabled on all interfaces?
>No only interfaces from where I want to collect netflow
>
> >have you checked the collector's net stats to see if you are
>overflowing the receive queue and hence dropping packets?
>Yes
>
> >are you sure you are reading all the flow datagrams contained within
>the packet?
>Yes
>
> >and have yuo checked the sequence numbers for a clue as to where the
>missing packets are?
>Yes, the problem seems to be that the netflows are not created, and 
>hence not missing in the sequence.
>
>
>
> >Steve
>
>On Sun, 22 Aug 2004, Nicolaj Ottsen wrote:
>
> > Dear all
> >
> > We are trying to make a sup-720 export netflow version 5, but we 
> > only recive about 10 % of the expected flow at our collector.
> > We checked the collector, so the problem seems to originate from the

> > sup-720 (12.2(17d)SXB1).
> >
> > What am I missing ?
> >
> > Our config is as follows
> >
> > mls aging fast
> > mls flow ip interface-full
> > mls nde sender version 5
> >
> > ip flow-export source Loopback0
> > ip flow-export version 5 origin-as
> > ip flow-export destination x.x.x.x xxxx
> >
> > Interface xxx/xxx
> >  ip route-cache flow
> >
> > Regards
> >
> > Nicolaj
> >
> >
> >
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net 
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> >
>
>
>
>
>_______________________________________________
>cisco-nsp mailing list  cisco-nsp at puck.nether.net 
>https://puck.nether.net/mailman/listinfo/cisco-nsp
>archive at http://puck.nether.net/pipermail/cisco-nsp/