[j-nsp] Netflow / JFlow questions

[Derick Winkworth]

You can configure a single template to export either IPv4 or MPLS flow data 
with.  However, when you actually configure sampling to send packets to the 
service-pic (or ms-dpc), you can not simultaneously sample and send both mpls 
and ipv4 packets to the pic/dpc.  So its either or. Either you are sampling on 
the CE/VRF side (IPv4) or the core side (MPLS).




 



________________________________
From: Chris Evans <chrisccnpspam2 at gmail.com>
To: Derick Winkworth <dwinkworth at att.net>
Cc: juniper-nsp at puck.nether.net
Sent: Wed, September 1, 2010 8:48:53 AM
Subject: Re: [j-nsp] Netflow / JFlow questions


Hrm..

That documentation is very wishy/washy, like usual. ARGH so frustrating to 
always deal with Juniper vague documentation.. If I can configure both 
templates, then what does it exactly mean that I cannot sample at the same time? 


It it documented anywhere that the M cannot do what I'm asking?? I'm guessing 
the answer is no?


On Tue, Aug 31, 2010 at 10:33 PM, Derick Winkworth <dwinkworth at att.net> wrote:

Its not possible on an M...  Its one or the other, IPv4 or MPLS...
>
>http://www.juniper.net/techpubs/software/junos/junos94/swconfig-policy/configuring-active-flow-monitoring-using-version-9.html
>
>
>
>"You can define a version 9 flow record template suitable for IPv4 traffic, 
MPLS
>traffic, or a combination of the two. However, you can sample packets from only
>one type of family (inet or mpls) at the same time."
>
>
>
>
>
>
>________________________________
>From: Chris Evans <chrisccnpspam2 at gmail.com>
>
>To: juniper-nsp at puck.nether.net
>Sent: Tue, August 31, 2010 8:01:44 PM
>
>Subject: [j-nsp] Netflow / JFlow questions
>
>
>Have a few questions for some folks who have implemented JFlow..
>
>I have a working jflow setup with basic ipv4 and ingress collection on a m7i
>with a services pic and also on a MX platform with the MS-DPC blade.
>
>#1 - Is egress netflow supported? It appears that only ingress is supported.
>#2 - Why do all examples that I can find say to use a firewall filter to
>sample traffic, I have successfully used the 'set interface xx-x/x/x unit xx
>family inet sample' command. This appears to be the new way of doing it.
>#3 - In my lab I have a MPLS VPN setup and am trying to netflow interfaces
>within the VRF. As it appears the device can only do ingress netflow I also
>need to sample the mpls interface. Does anyone have an example of how to
>gather netflow stats from both the vrf and mpls pe <> p interfaces?
>
>
>Thanks
>
>Chris
>_______________________________________________
>juniper-nsp mailing list juniper-nsp at puck.nether.net
>https://puck.nether.net/mailman/listinfo/juniper-nsp
>_______________________________________________
>juniper-nsp mailing list juniper-nsp at puck.nether.net
>https://puck.nether.net/mailman/listinfo/juniper-nsp
>