[c-nsp] Netflow export from 6500 w/sup-720

[Stephen J. Wilcox]

On Sun, 22 Aug 2004, Nicolaj Ottsen wrote:

> >do you have ip route-cache flow enabled on all interfaces? 
> No only interfaces from where I want to collect netflow

this will only enable netflow to flows coming in on the specified interfaces 
(not out), to capture outbound flows you need to enable it on all the interfaces 
that these flows would come in (ie all the others).... are you only after 
inbound?

Steve


> 
> >have you checked the collector's net stats to see if you are
> overflowing the receive queue and hence dropping packets?
> Yes
> 
> >are you sure you are reading all the flow datagrams contained within
> the packet? 
> Yes
> 
> >and have yuo checked the sequence numbers for a clue as to where the
> missing packets are?
> Yes, the problem seems to be that the netflows are not created, and
> hence not missing in the sequence.
> 
> 
> 
> >Steve
> 
> On Sun, 22 Aug 2004, Nicolaj Ottsen wrote:
> 
> > Dear all
> > 
> > We are trying to make a sup-720 export netflow version 5, but we only 
> > recive about 10 % of the expected flow at our collector.
> > We checked the collector, so the problem seems to originate from the 
> > sup-720 (12.2(17d)SXB1).
> > 
> > What am I missing ?
> > 
> > Our config is as follows
> > 
> > mls aging fast
> > mls flow ip interface-full
> > mls nde sender version 5
> > 
> > ip flow-export source Loopback0
> > ip flow-export version 5 origin-as
> > ip flow-export destination x.x.x.x xxxx
> > 
> > Interface xxx/xxx
> >  ip route-cache flow
> > 
> > Regards
> > 
> > Nicolaj
> > 
> > 
> > 
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net 
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> > 
> 
> 
> 
>