[c-nsp] sampled netflow on 6500

[Christian MacNevin]

It's a bit more of a complex beast, as it lives in multiple physical  
locations on the 6500, depending on whether you have DFCs or not and  
whether
you're routing the packets or not.

Sflow I believe on a foundry is actually interface logic, which means  
any interface will send exactly what it sees. Be prepared for some  
more mickey-mousing
around with netflow. ALso netflow v9 isn't supported on a 6500 is it?  
It's really going to be v5 you're using on a 3bxl. 7 is supported but  
nobody likes it.

you need to look up mls netflow, netflow, and nde (netflow data  
export). ANd understand what happens when you have dfcs integrated  
into your line cards.

Good luck
christian


On Nov 16, 2008, at 3:12 AM, Mike Louis wrote:

Sounds like I got that backwards.

Here is a link to configuring netflow sampling. I don't see a lot of  
options in the SXH configuration guide at the moment. I will keep  
looking.

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/nde.html#wp1143262

From: patrick.viet at gmail.com [mailto:patrick.viet at gmail.com] On Behalf  
Of Patrick Viet
Sent: Saturday, November 15, 2008 9:09 AM
To: Mike Louis
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] sampled netflow on 6500

On Sat, Nov 15, 2008 at 4:23 AM, Mike Louis <MLouis at nwnit.com<mailto:MLouis at nwnit.com 
 >> wrote:
You can use sampled netflow to accomplish the same thing as sflow.  
Netflow v9 is based on the ipix std so it will offer many of its  
features


Hi ; are you sure about this ? From what I've read it's the opposite :  
IPFIX has based its frame format on Netflow v9.
Any ideas about how to configure this on SUP720-3BXL with SXF15 ? Or  
do I need another IOS (SXH?)

Thanks,

Patrick

No virus found in this incoming message.
Checked by AVG - http://www.avg.com
Version: 8.0.175 / Virus Database: 270.9.4/1789 - Release Date:  
11/14/2008 7:32 PM

________________________________
Note: This message and any attachments is intended solely for the use  
of the individual or entity to which it is addressed and may contain  
information that is non-public, proprietary, legally privileged,  
confidential, and/or exempt from disclosure. If you are not the  
intended recipient, you are hereby notified that any use,  
dissemination, distribution, or copying of this communication is  
strictly prohibited. If you have received this communication in error,  
please notify the original sender immediately by telephone or return  
email and destroy or delete this message along with any attachments  
immediately.
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/