[c-nsp] sampled v9 netflow

Nikolay Shopik shopik at inblock.ru
Fri Nov 29 05:49:25 EST 2013


On 29/11/13 14:37, Dobbins, Roland wrote:
> 
> On Nov 29, 2013, at 4:24 PM, Nikolay Shopik <shopik at inblock.ru> wrote:
> 
>> flow monitor IPv4
>> record netflow ipv4 original-input
>> exporter AS-STATS
>> cache timeout active 300
> 
>> flow monitor IPv6
>> record netflow ipv6 original-input
>> exporter AS-STATS
>> cache timeout active 300
> 
> Your active timers should be 60s, and your inactive timers should be 5s.  With this 5-minute active timer, all your stats will be back-loaded and not representative of actual traffic.

So this is apply to any sampled netflow?

> 
>> interface GigabitEthernet0/1
>> ip address 10.10.112.143 255.255.255.0
>> ipv6 address 2001:db8:20:101::99/64
>> ip flow monitor IPv4 input
>> ipv6 flow monitor IPv6 input
>> flow-sampler SM
>> end
> 
> Try this on your interface:
> 
> interface GigabitEthernet0/1
> ip address 10.10.112.143 255.255.255.0
> ipv6 address 2001:db8:20:101::99/64
> ip flow monitor IPv4 sampler SM input
> ipv6 flow monitor IPv6 sampler SM input
> end
> 

I also though about - ip flow monitor IPv4 sampler SM input, but for
some reason it won't accept it while still advertise command

c7201(config-if)#ip flow monitor IPv4 ?
  input      Apply Flow Monitor on input traffic
  multicast  Apply Flow Monitor on multicast traffic
  output     Apply Flow Monitor on output traffic
  sampler    Optional Sampler to apply to this Flow Monitor
  unicast    Apply Flow Monitor on unicast traffic

c7201(config-if)#ip flow monitor IPv4 sampler SM input
                                              ^
% Invalid input detected at '^' marker.

Probably need to go with different release or not S build.
> 
> -----------------------------------------------------------------------
> Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>
> 
> 	  Luck is the residue of opportunity and design.
> 
> 		       -- John Milton
> 
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 


More information about the cisco-nsp mailing list