[c-nsp] sampled v9 netflow
Nikolay Shopik
shopik at inblock.ru
Fri Nov 29 05:49:25 EST 2013
On 29/11/13 14:37, Dobbins, Roland wrote:
>
> On Nov 29, 2013, at 4:24 PM, Nikolay Shopik <shopik at inblock.ru> wrote:
>
>> flow monitor IPv4
>> record netflow ipv4 original-input
>> exporter AS-STATS
>> cache timeout active 300
>
>> flow monitor IPv6
>> record netflow ipv6 original-input
>> exporter AS-STATS
>> cache timeout active 300
>
> Your active timers should be 60s, and your inactive timers should be 5s. With this 5-minute active timer, all your stats will be back-loaded and not representative of actual traffic.
So this is apply to any sampled netflow?
>
>> interface GigabitEthernet0/1
>> ip address 10.10.112.143 255.255.255.0
>> ipv6 address 2001:db8:20:101::99/64
>> ip flow monitor IPv4 input
>> ipv6 flow monitor IPv6 input
>> flow-sampler SM
>> end
>
> Try this on your interface:
>
> interface GigabitEthernet0/1
> ip address 10.10.112.143 255.255.255.0
> ipv6 address 2001:db8:20:101::99/64
> ip flow monitor IPv4 sampler SM input
> ipv6 flow monitor IPv6 sampler SM input
> end
>
I also though about - ip flow monitor IPv4 sampler SM input, but for
some reason it won't accept it while still advertise command
c7201(config-if)#ip flow monitor IPv4 ?
input Apply Flow Monitor on input traffic
multicast Apply Flow Monitor on multicast traffic
output Apply Flow Monitor on output traffic
sampler Optional Sampler to apply to this Flow Monitor
unicast Apply Flow Monitor on unicast traffic
c7201(config-if)#ip flow monitor IPv4 sampler SM input
^
% Invalid input detected at '^' marker.
Probably need to go with different release or not S build.
>
> -----------------------------------------------------------------------
> Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>
>
> Luck is the residue of opportunity and design.
>
> -- John Milton
>
>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
More information about the cisco-nsp
mailing list