[c-nsp] Cisco 6500/7600 netflow questions

[Phil Bedard]

  One thing I've noticed on the box is that the "mls netflow ip"  
cache entries never age above
8 seconds which is our export interval setup for sampling.   So  
perhaps those are the entries
that it's exporting.   After 8 seconds some of those flows definitely  
have more than 1-2 packets recorded
but for the exported data I only see 1-2 packets.   Also not all the  
flows I see in "sho mls netflow ip" are
being exported...

This is another behaviour that I can't find any information on:

xxxx#show mls ip count
Displaying Netflow entries in Supervisor Earl

Number of shortcuts = 108922

xxxx#show mls ip count
Displaying Netflow entries in Supervisor Earl

Number of shortcuts = 115776

xxxx#show mls ip count
Displaying Netflow entries in Supervisor Earl

Number of shortcuts = 1909

Is there a counter wrapping or does the number of entries just reset  
to 0?


Phil


On Nov 13, 2006, at 1:00 PM, Anton Kapela wrote:

>
> It seems likely this is an artifact of insertion failures rather  
> than an
> honest bug or some configurable behavior. That is to say, there may be
> enough failures/sec that the resulting entry indicates a few packets
> which matched before it was expired (and replaced by a new one).
>
> -Tk