[c-nsp] 6500 NDE aging "prematurely"
Phil Mayers
p.mayers at imperial.ac.uk
Wed Jun 4 09:37:31 EDT 2008
Ben Hicks wrote:
> From
> http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6555/ps6601/prod_white_paper0900aecd80406232.html
>
> -The NetFlow cache is constantly filling with flows and software in the
> router or switch is searching the cache for flows that have terminated
> or expired and these flows are exported to the NetFlow collector server.
> Flows are terminated when the network communication has ended (ie: a
> packet contains the TCP FIN flag). The following steps are used to
Ok, this appears to be the key.
I was under the impression that the 6500 PFC/DFC were not TCP-flag
aware, however as you say, testing indicates they are.
Thanks all.
More information about the cisco-nsp
mailing list