[j-nsp] packet sampling does not export any data, why?

[Kisito Nguene Ndoum]

Hi Joe,

Please try the following steps :

1- Check log messages for errors at commit time
(show log messages or archived files .gz )

2- Check hardware ( must have Internet Processor II )
( show chassis hardware | match SPR )

3- Verify that firewall counter ("sj" in your configuration) is working
( show firewall )

4- If hardware is IP-II and have no error after commit, add "local-dump" to 
debug
the formatting/sending of the cflowd records
( set forwarding-options output cflowd 10.13.61.2 local-dump )
Remove that debug statement when troubleshooting is complete.

5- Start monitoring sampled log file -- cflowd records or errors should be 
displayed as they are generated
( monitor start sampled )

6- Generate transit traffic to get some cflowd records ( statistical 
sampling is only effective for transit traffic )

7- If still not working, here, try with output to file instead of cflowd 
collector, and redo steps 5- and 6-
( set forwarding-options output file xxxx )

8- If still not working at this stage, restart the sampling process
( restart sampling immediately )

9- If still not there, open a case with JTAC :-)


Hope this helps,
- Kisito

At 04:40 AM 11/18/2004, Joe Shen wrote:

>Hi,
>
>I'm trying to export "netflow" data from our M160.
>I do the following configuration:
>
>ge-3/0/0 {
>         description to_wul_10720;
>         mtu 1522;
>         unit 0 {
>             family inet {
>                 filter {
>                     input netflow-sj;
>                 }
>                 address 10.10.67.129/30;
>             }
>             family mpls {
>                 mtu 1508;
>             }
>         }
>
>
>forwarding-options {
>     sampling {
>         input {
>             family inet {
>                 rate 1000;
>                 run-length 1;
>             }
>         }
>         output {
>            cflowd 10.13.61.2 {
>                 port 2056;
>                 version 5;
>             }
>
>         }
>     }
>}
>
>
>firewall {
>   filter netflow-sj {
>         term all {
>             then {
>                 count sj;
>                 sample;
>                 accept;
>             }
>         }
>     }
>}
>
>
>but, after setting up the configuration there is no
>packet exported. Why? How could I get it work?
>
>Another question, if I want to get statistics of
>source AS and destination AS, could I use "origin-as"
>?
>
>
>
>regards
>
>Joe
>
>
>
>_________________________________________________________
>Do You Yahoo!?
>150ÍòÇúMP3·è¿ñËÑ£¬´øÄú´³ÈëÒôÀÖµîÌÃ
><http://cn.rd.yahoo.com/mail_cn/tag/yisou/music/*http://music.yisou.com/>http://cn.rd.yahoo.com/mail_cn/tag/yisou/music/*http://music.yisou.com/
>ÃÀÅ®Ã÷ÐÇÓ¦Óо¡ÓУ¬ËѱéÃÀͼ¡¢ÑÞͼºÍ¿áͼ
>http://cn.rd.yahoo.com/mail_cn/tag/yisou/image/*http://image.yisou.com
>1G¾ÍÊÇ1000Õ×£¬ÑÅ»¢µçÓÊ×ÔÖúÀ©ÈÝ£¡
><http://cn.rd.yahoo.com/mail_cn/tag/1g/*http://cn.mail.yahoo.com/event/mail_1g/>http://cn.rd.yahoo.com/mail_cn/tag/1g/*http://cn.mail.yahoo.com/event/mail_1g/
>_______________________________________________
>juniper-nsp mailing list juniper-nsp at puck.nether.net
><http://puck.nether.net/mailman/listinfo/juniper-nsp>http://puck.nether.net/mailman/listinfo/juniper-nsp