[c-nsp] max flow-cache entries

Oliver Boehmer (oboehmer) oboehmer at cisco.com
Fri Nov 25 02:36:17 EST 2005


Dmitry Kiselev <> wrote on Thursday, November 24, 2005 3:51 PM:

> Hello!
> 
> I have 7200-G1 router runing IOS 12.3T and configured for
> do netflow stats:
> 
> ip flow-cache entries 524288
> ip flow-cache timeout active 10
> ...
> ip flow-export version 5
> ip flow-export destination X.X.X.X NN
> 
> 
> But seems to reach maximum cache entries limit:
> 
> Router# sh ip cache flow
> ...
> IP Flow Switching Cache, 35653632 bytes
>   524286 active, 2 inactive, 2632855 added
> 
> What IOS do with new flow record when no free flow-cache
> entries are available?

IOS will fast-age the cache to free up some entries, it applies some
aggressive heuristics.

> Is there any way to increase max value?

You can't increase it above 512k, you might even think about lowering it
closer to the default (I think it is 60k on the 7200) as maintaining
such a large flow-cache is rather CPU intensive.

	oli



More information about the cisco-nsp mailing list