[c-nsp] Counters for null0?

Julio Arruda jarruda-cnsp at jarruda.com
Wed Aug 5 11:13:28 EDT 2009


Gert Doering wrote:
> Hi,
> 
> On Wed, Aug 05, 2009 at 08:49:50AM -0400, Julio Arruda wrote:
>> Isn't all process switched/punted traffic reported as ifout == Null in 
>> Netflow ?
> 
> If a given IOS version does that, it's a bug.
> 
> ifout = NULL usually means "traffic dropped due to ACL or no route".
> 
> gert

Being more specific, since clearly I used the wrong term :-)..
If traffic is processed by the CPU, being it NAT or OSPF/BGP/ICMP to the 
box itself, I saw in most cases, the netflow would be showing as ifout == 0.
I saw in one specific case a couple of years ago, some VPN traffic also 
being shown as IfOut=0, but this was in a 6500 running hybrid, not 
Native, and most likely was not the expected behaviour.


More information about the cisco-nsp mailing list