[c-nsp] Netflow Sampling

Joe Loiacono jloiacon at csc.com
Sat Jul 11 10:33:59 EDT 2009


Netflow collectors generally are passive with respect to receiving netflow 
only. They do not poll the devices; The devices export according to their 
export timing parameters which generally winds up producing a steady 
stream of UDP netflow packets to the collector.

Joe.



"Oddiraju, Kiran @ London SMC" <Kiran.Oddiraju at cbre.com> 
Sent by: cisco-nsp-bounces at puck.nether.net
07/10/2009 11:26 AM

To
"David Freedman" <david.freedman at uk.clara.net>, 
<cisco-nsp at puck.nether.net>
cc

Subject
Re: [c-nsp] Netflow Sampling






Actually we want to increase the sampling interval on the collector to
see what's happening on a particular link. I don't know what is the
default sampling interval but we want to change it to something like
every minute.

Thanks David.

Regards,
Kiran

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of David Freedman
Sent: 10 July 2009 14:30
To: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] Netflow Sampling

I didn't know sampling was available for this platform?
I don't believe it is.

Are you doing this to reduce load / storage on your collector?

David.


Oddiraju, Kiran @ London SMC wrote:
> Guys,
> 
> 
> 
> I am trying to configure Netflow sampling interval on a c1801 router
> (IOS version "c180x-broadband-mz.124-15.T6.bin"). I was able to enable
> Netflow globally and configured it on the interface as well. But I
can't
> setup sampling, it doesn't like the commands. What am I doing wrong?
> 
> 
> 
> Config
> 
> 
> 
> interface FastEthernet0
> 
>  ip address 10.15.255.50 255.255.255.252
> 
>  ip flow ingress
> 
>  ip route-cache flow
> 
>  speed 100
> 
>  full-duplex
> 
> !
> 
> 
> 
> ip flow-export source FastEthernet0
> 
> ip flow-export version 5
> 
> ip flow-export destination 10.13.246.50 2055
> 
> ip flow-export destination 10.15.246.66 2055
> 
> 
> 
> 
> 
> Netflow-Test(config-if)#ip route-cache flow sampled
> 
>                                             ^
> 
> % Invalid input detected at '^' marker.
> 
> 
> 
> Netflow-Test(config)#ip flow-sampling-mode packet-interval ?
> 
> % Unrecognized command
> 
> 
> 
> Many thanks,
> 
> Kiran
> 
> 
> CB Richard Ellis Limited, Registered Office: St Martin's Court, 
> 10 Paternoster Row, London, EC4M 7HP, registered in England and Wales
No. 3536032. 
> Regulated by the RICS and an appointed representative of CB Richard
Ellis 
> Indirect Investment Services Limited which is authorised and regulated
by the Financial Services Authority.
> 
> This communication is from CB Richard Ellis Limited or one of its 
> associated/subsidiary companies. This communication contains
information 
> which is confidential and may be privileged. If you are not the
intended recipient, 
> please contact the sender immediately. Any use of its contents is
strictly prohibited 
> and you must not copy, send or disclose it, or rely on its contents in
any way whatsoever. 
> Reasonable care has been taken to ensure that this communication 
> (and any attachments or hyperlinks contained within it) is free from
computer viruses. 
> No responsibility is accepted by CB Richard Ellis Limited or its
associated/subsidiary 
> companies and the recipient should carry out any appropriate virus
checks.
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
CB Richard Ellis Limited, Registered Office: St Martin's Court, 
10 Paternoster Row, London, EC4M 7HP, registered in England and Wales No. 
3536032. 
Regulated by the RICS and an appointed representative of CB Richard Ellis 
Indirect Investment Services Limited which is authorised and regulated by 
the Financial Services Authority.

This communication is from CB Richard Ellis Limited or one of its 
associated/subsidiary companies. This communication contains information 
which is confidential and may be privileged. If you are not the intended 
recipient, 
please contact the sender immediately. Any use of its contents is strictly 
prohibited 
and you must not copy, send or disclose it, or rely on its contents in any 
way whatsoever. 
Reasonable care has been taken to ensure that this communication 
(and any attachments or hyperlinks contained within it) is free from 
computer viruses. 
No responsibility is accepted by CB Richard Ellis Limited or its 
associated/subsidiary 
companies and the recipient should carry out any appropriate virus checks.

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/



More information about the cisco-nsp mailing list