[c-nsp] Netflow with nfsen issue

[Satish Patel]

Nevermind, my bad following command works :) Thank you so much!

R1#show flow monitor netflow-monitor cache sort highest counter packets top
2
Processed 77 flows
Aggregated to 2 flows
Showing the top 2 flows

IPV4 SRC ADDR    IPV4 DST ADDR    TRNS SRC PORT  TRNS DST PORT  IP PROT
  bytes        pkts    time first     time last
===============  ===============  =============  =============  =======
 ==========  ==========  ============  ============
162.210.198.75   xx.xx.xx.xx            57932          53413       17
34563         123  21:40:07.514  21:40:07.518
162.210.194.100  xx.xx.xx.xx            54942          53413       17
34563         123  21:40:09.722  21:40:09.726

On Wed, Jul 6, 2016 at 9:38 PM, Satish Patel <satish.txt at gmail.com> wrote:

> I don't have (sh top talker )  command, We have ASR1006
>
> R1#show top?
> topology
>
> R1#sh version
> Cisco IOS XE Software, Version 03.16.03.S - Extended Support Release
> Cisco IOS Software, ASR1000 Software
> (X86_64_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.5(3)S3, RELEASE SOFTWARE
> (fc1)
> Technical Support: http://www.cisco.com/techsupport
> Copyright (c) 1986-2016 by Cisco Systems, Inc.
> Compiled Thu 09-Jun-16 23:40 by mcpre
> ..
> ROM: IOS-XE ROMMON
> ..
> System image file is "bootflash:
> asr1000rp2-adventerprisek9.03.16.03.S.155-3.S3-ext.bi"
>
>
>
> On Wed, Jul 6, 2016 at 7:31 PM, CiscoNSP List <CiscoNSP_list at hotmail.com>
> wrote:
>
>>
>> Havent followed the entire thread, but you are using FNF correct? sh ip
>> cache flow is for the "old style" (ip flow ingress)
>>
>> with FNF, there's a lot more flexibility to viewing flows....i.e. sh top
>> talker sorted - show flow monitor <FNF Monitor name> cache sort highest
>> counter packets top 20
>>
>>
>>
>> ------------------------------
>> *From:* cisco-nsp <cisco-nsp-bounces at puck.nether.net> on behalf of
>> Satish Patel <satish.txt at gmail.com>
>> *Sent:* Thursday, 7 July 2016 6:29 AM
>> *To:* Tom Hill
>> *Cc:* Cisco Network Service Providers
>> *Subject:* Re: [c-nsp] Netflow with nfsen issue
>>
>> Following command output is empty is that normal? Do you think that is
>> because of Hardware base netflow, i meant its using CEF?
>>
>> R1#show ip cache flow
>>
>>
>> On Wed, Jul 6, 2016 at 3:05 PM, Tom Hill <tom at ninjabadger.net> wrote:
>> > On 05/07/16 22:13, Satish Patel wrote:
>> >> I found solution to fix timestamp:
>> >>
>> >> I have added following to as per Peter said.
>> >>
>> >> collect timestamp sys-uptime first
>> >> collect timestamp sys-uptime last
>> >>
>> >> and change export fron ipfix to v9
>> >>
>> >> Now i can see correct timestamp on Nfsen :)
>> >
>> > Thanks for posting your solution, Satish. :)
>> >
>> > --
>> > Tom
>> > _______________________________________________
>> > cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> > https://puck.nether.net/mailman/listinfo/cisco-nsp
>> cisco-nsp Info Page - puck.nether.net
>> <https://puck.nether.net/mailman/listinfo/cisco-nsp>
>> puck.nether.net
>> To see the collection of prior postings to the list, visit the cisco-nsp
>> Archives. Using cisco-nsp: To post a message to all the list members, send
>> ...
>>
>>
>> > archive at http://puck.nether.net/pipermail/cisco-nsp/
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
>
>