[c-nsp] Re: Netflow and Sup720 / 12.2(18)SXE
Gert Doering
gert at greenie.muc.de
Thu Jul 28 12:29:00 EDT 2005
Hi,
On Thu, Jul 28, 2005 at 06:24:42PM +0200, Gert Doering wrote:
> mls flow ip full
[..]
> 195.30.0.42|10.42.42.40|0|15|10.42.42.40|101829|152738828|1551270|1563878|53296|2972|-1|0x00|6|0|0|0|26|24|-1
> 10.42.42.40|195.30.0.42|0|2|193.149.44.115|46791|2433140|1551270|1563878|2972|53296|-1|0x00|6|0|0|0|24|26|-1
OK, *that* part was easy.
Stupid me to assume that "full" means "all of it" - it doesn't,
"interface-full" is what I need...
10.42.42.40|195.30.0.42|15|2|193.149.44.115|46915|2439588|651566|664174|2981|53309|-1|0x00|6|0|0|0|24|26|-1
195.30.0.42|10.42.42.40|2|15|10.42.42.40|101829|152738828|651566|664174|53309|2981|-1|0x00|6|0|0|0|26|24|-1
... and here we go, full src and destination interface ifindexes.
To have the *router* prune flow records for interfaces that we don't
want to see would be even nicer, but I can live with this ("it's just
wasting bandwidth and CPU on router and collector").
gert
--
USENET is *not* the non-clickable part of WWW!
//www.muc.de/~gert/
Gert Doering - Munich, Germany gert at greenie.muc.de
fax: +49-89-35655025 gert at net.informatik.tu-muenchen.de
More information about the cisco-nsp
mailing list