[c-nsp] Another netflow question
Tassos Chatzithomaoglou
achatz at forthnet.gr
Mon Mar 27 08:40:54 EST 2006
Well, i actually wanted to say what is the difference between "ip route-cache
flow" and "ip flow ingress" ;)
The only thing i have found is some notes on CCO that say the 1st is used on the
main interface and the 2nd on subinterfaces.
Oliver Boehmer (oboehmer) wrote on 24/3/2006 16:01:
> Well, one collects flows in ingress (ip route-cache flow), one in egress
> direction.
>
> oli
>
> Tassos Chatzithomaoglou <mailto:achatz at forthnet.gr> wrote on Friday,
> March 24, 2006 12:29 PM:
>
>
>>Is there any difference between "ip flow egress" and "ip route-cache
>>flow"?
>>
>>
>>Tassos
>>
>>
>>Oliver Boehmer (oboehmer) wrote on 23/3/2006 13:03:
>>
>>
>>>news.gmane.org <> wrote on Thursday, March 23, 2006 11:56 AM:
>>>
>>>
>>>
>>>>Hi,
>>>>
>>>>i have cisco with 2 FE interfaces. Client connected to
>>>>FastEthernet0/0, to internet listen FastEthernet0/1. If i use config
>>>>like it is netflow double traffic or no ?
>>>>
>>>>ip flow-egress input-interface
>>>>ip flow-cache entries 4094
>>>>ip flow-cache timeout active 3
>>>>!
>>>>interface FastEthernet0/0
>>>> ip flow ingress
>>>> ip flow egress
>>>>!
>>>>interface FastEthernet0/1
>>>> ip flow ingress
>>>> ip flow egress
>>>>
>>>>When i look sh ip cache flow i see
>>>>
>>>>SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP
>>>>DstP Pkts Fa0/1 193.238.118.189 Fa0/0* 81.19.66.19
>>>>06 C76D 0050 4 Fa0/1 193.238.118.189 Fa0/0
>>>>81.19.66.19 06 C76D 0050 4
>>>>
>>>>what is marked with '*' ? Is it double packet ? Is it exported to
>>>>collector ?
>>>
>>>
>>>"*" denotes an output/egress flow. With your config, you will see two
>>>flows (i.e. double the traffic).
>>>
>>> oli
>>>
>>>_______________________________________________
>>>cisco-nsp mailing list cisco-nsp at puck.nether.net
>>>https://puck.nether.net/mailman/listinfo/cisco-nsp
>>>archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>
--
***************************************
Tassos Chatzithomaoglou
Network Design & Development Department
FORTHnet S.A.
<achatz at forthnet.gr>
***************************************
More information about the cisco-nsp
mailing list