[nsp] Cat6500/MSFC: netflow export problem with IP SLB (server load balancing)

[Alexander Lucke]

Hi,

I just saw that we have a problem with netflow export on our collocation
switch (cat6506 w/ MSFC/PFC) here.

We configured load balancing for some customers:

	ip slb serverfarm SLB-QUESTI-WEB
	 nat server
	 predictor leastconns
	 !
	 real 212.91.225.58
	  inservice
	 !
	 real 212.91.225.114
	  inservice
	!
	ip slb vserver VS-QUESTI-WEB
	 virtual 212.91.224.162 tcp www
	 serverfarm SLB-QUESTI-WEB
	 sticky 600
	 inservice
	!

I see about 6 MBit/s incoming on the interface pointing to the "real"
servers but no IP traffic in the netflow data export. The traffic comes
definitely from the SLB (from the IPs 212.91.225.58 and 212.91.225.114) -
I checked this by moving the traffic to another interface.

Nevertheless, in the netflow data export, I see almost nothing (between 10
and 30 MB per month for the real IPs and 0 for the virtual IP). It seems
that the catalyst does not export netflows for traffic between the real
servers and the (software) "slb process" or between the virtual IP and the
"outside world".

Do you have any experience with (IOS) SLB and netflow accounting? How can
I see the SLB traffic?

Regards,
Alexander Lucke

--
alexander lucke . managing director
DNS:NET internet service gmbh . ostseestrasse 111 . 10409 berlin
http://www.dns-net.de . ' +49-30-420278-22 . 6 +49-30-420278-78

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 2912 bytes
Desc: not available
Url : https://puck.nether.net/pipermail/cisco-nsp/attachments/20040605/035a8cfb/smime-0001.bin