[c-nsp] ASR Netflow Query

Roddy Strachan roddy.strachan at staff.netspace.net.au
Mon Sep 15 00:46:14 EDT 2008


Hey all,

Been playing around with an ASR1004 for terminating L2TP sessions.

One thing I¹ve noticed that shows up in a cache flow output is the following
:

gi0/1/0.1     x.x.x.x  RP0_Punt      224.0.0.5       59 0000 0000  17
gi0/1/0.1     x.x.x.x  RP0_Punt      224.0.0.5       59 0000 0000  17
gi0/1/0.1     x.x.x.x  RP0_Punt      224.0.0.5       59 0000 0000  608
gi0/1/0.1     x.x.x.x  RP0_Punt      224.0.0.5       59 0000 0000  17
gi0/1/0.1     x.x.x.x  RP0_Punt      224.0.0.5       59 0000 0000  198

That in turn fills up our flow files on the collectors with data looking
like this :

1221452253 x.x.x.x x.x.x.x 0 224.0.0.5 0 12740 2 0 0 0
1221452255 x.x.x.x x.x.x.x 0 224.0.0.5 0 11648 2 0 0 0
1221452259 x.x.x.x x.x.x.x 0 224.0.0.5 0 12740 2 0 0 0
1221452260 x.x.x.x x.x.x.x 0 224.0.0.5 0 12740 2 0 0 0


I don¹t see this type of behaviour on the 7200/7300 platform doing the same
type of thing for L2TP sessions.

>From what I understand its a multicast broadcast for OSPF (correct me if I¹m
wrong).

Is there anyone to turn this off so it doesn¹t show up in the  ³sh ip cache
flow² output ? Therefor not filling up out collector with unnecessary
information

Thanks



This email and any files transmitted with it are confidential and intended
 solely for the use of the individual or entity to whom they are addressed. 
Please notify the sender immediately by email if you have received this 
email by mistake and delete this email from your system. Please note that
 any views or opinions presented in this email are solely those of the
 author and do not necessarily represent those of the organisation. 
Finally, the recipient should check this email and any attachments for 
the presence of viruses. The organisation accepts no liability for any 
damage caused by any virus transmitted by this email.



More information about the cisco-nsp mailing list