[c-nsp] Re: Netflow and Sup720 / 12.2(18)SXE

Gert Doering gert at greenie.muc.de
Thu Jul 28 12:29:00 EDT 2005


Hi,

On Thu, Jul 28, 2005 at 06:24:42PM +0200, Gert Doering wrote:
> mls flow ip full
[..]
> 195.30.0.42|10.42.42.40|0|15|10.42.42.40|101829|152738828|1551270|1563878|53296|2972|-1|0x00|6|0|0|0|26|24|-1
> 10.42.42.40|195.30.0.42|0|2|193.149.44.115|46791|2433140|1551270|1563878|2972|53296|-1|0x00|6|0|0|0|24|26|-1

OK, *that* part was easy.

Stupid me to assume that "full" means "all of it" - it doesn't, 
"interface-full" is what I need...

10.42.42.40|195.30.0.42|15|2|193.149.44.115|46915|2439588|651566|664174|2981|53309|-1|0x00|6|0|0|0|24|26|-1
195.30.0.42|10.42.42.40|2|15|10.42.42.40|101829|152738828|651566|664174|53309|2981|-1|0x00|6|0|0|0|26|24|-1

... and here we go, full src and destination interface ifindexes.


To have the *router* prune flow records for interfaces that we don't
want to see would be even nicer, but I can live with this ("it's just
wasting bandwidth and CPU on router and collector").

gert

-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de


More information about the cisco-nsp mailing list