[c-nsp] 6500 Netflow

Paul Stewart paul at paulstewart.org
Thu Apr 17 09:18:58 EDT 2008


That's it!  Thanks very much... "ip flow ingress" solved my problem...

Paul


-----Original Message-----
From: Jeff Fitzwater [mailto:jfitz at Princeton.EDU] 
Sent: Wednesday, April 16, 2008 1:16 PM
To: Paul Stewart
Cc: 'cisco-nsp'
Subject: Re: [c-nsp] 6500 Netflow

Not sure what IOS you are running, which can make a difference, but  
you are probably only seeing route-processor flows and not mls  
switched flows.
There should be an interface command like "ip flow-cache" or "ip flow  
ingress".     There are other commands that enable BRIDGED flows to be  
included,  (port to port within switch) but don't remember what they  
are.

Jeff  Fitzwater
OIT Network Systems
Princeton University


On Apr 16, 2008, at 12:20 PM, Paul Stewart wrote:

> Hi there...
>
> I am trying to turn up netflow reporting on a 6500 - ran into this  
> before
> and can't remember the solution....;)
>
> On the reporting server I'm not getting the correct levels of data -  
> almost
> like it's sampling the data by default...
>
> Can someone tell me the missing piece here?  I've searched the 6500  
> docs and
> don't see anything wrong....
>
> Config looks like this:
>
> ip flow-cache timeout active 1
> mls flow ip interface-full
> ip flow-export version 5 origin-as
> ip flow-export destination xxx.xxx.xxx.xxx xxxx
> mls rp ip
> mls aging long 64
> mls aging normal 32
> mls flow ip interface-full
> mls nde sender version 5
> no mls acl tcam share-global
>
> Thanks ... the netflow reporting system works great against the  
> GSR's, only
> having this problem with the 6500's
>
> Paul
>
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/



More information about the cisco-nsp mailing list