Search 97,742 posts and 786 resources contributed by 57,092 members or post a topic.

Already Joined? Sign in
NetFlow Not What I Expected

Page 1 of 1 (6 items) | RSS

rated by 0 users
Answered (Not Verified) This post has 0 verified answers | 5 Replies | 2 Followers | 351 Views


15 Posts
Points 41
SpinnerRow replied on Thu, Mar 18 2010 9:48 AM
rated by 0 users

I have a Cisco 6509 running 12.2(17r)S2 that I've got NetFlow set up on.  This switch is our router so it has a lot of MSFC type interfaces on it.  The only netflow data that I'm getting is from the MSFC interfaces and nothing from anything else?  How do I get the switch interfaces to send NetFlow Data.  Here is the config I have on switch.  What am I doing wrong?

ip flow ingress layer2-switched vlan 7,10,15,21,41,55,59,101,105,110,115,121,144,149,163,165,170-171,176,179,189,195,201,203,205,207,216-217,223,228-229,254,259,275,297,301,392-394,401,491,495,501,511,535,545,554,601,611,686,695,701,801-812,814,816-818,901,903,910,913,915,919,925,929,931,935,955,957,963,971,981,990-991,997
mls aging fast time 8 threshold 127
mls aging normal 128
mls flow ip full
mls nde sender
no mls acl tcam share-global
mls ip multicast flow-stat-timer 9
mls cef error action freeze

ip flow-export source Vlan59
ip flow-export destination xx.xx.xx.xx 2055

 

  • | Post Points: 5

All Replies


131 Posts
Points 797
SolarWinds Employee
Answered (Not Verified) GZhytar replied on Thu, Mar 18 2010 10:35 AM
rated by 0 users
Suggested by MarieB

Hi SpinnerRow,

please look at this post: http://thwack.com/forums/t/7294.aspx I'm pretty sure you'll need to update your firmware.

thanks

 

Georgiy Zhytar  ∙  SolarWinds  ∙  NTA development lead

  • Post Points: 3

578 Posts
Points 3,349
ecklerwr1 replied on Thu, Mar 18 2010 11:07 AM
rated by 0 users

This version seems to working ok for me:

Cisco IOS Software, s72033_rp Software (s72033_rp-ADVIPSERVICESK9_WAN-M), Version 12.2(33)SXI1, RELEASE SOFTWARE (fc3) Technical Support:

 B. Eckler
Engineering Application Services
GENERAL DYNAMICS C4 Systems

SolarWinds Orion Core 2010.1.0, NPM 10.0.0, NTA 3.6

  • | Post Points: 1

15 Posts
Points 41
SpinnerRow replied on Thu, Mar 18 2010 11:20 AM
rated by 0 users

Will I get more data if I upgrade?  What more do I get if I upgrade my firmware?

  • | Post Points: 5

578 Posts
Points 3,349
ecklerwr1 replied on Thu, Mar 18 2010 11:25 AM
rated by 0 users

I think Georgiy's point was that there are issues with some versions of the ios incuding yours I think:

The Cisco IOS version you are running "12.2-18.SXF12a.bin" according Cisco website (Netflow is globle export only) not just single interfaces.

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/configuration/guide/nde.html

The newer -33 IOS version would allow you the just run Netflow chosen interfaces.

Also:

this command "ip flow ingress layer2-switched vlan X" does not work on a 6509 with "Cisco Internetwork Operating System Software
IOS (tm) s72033_rp Software (s72033_rp-PK9SV-M), Version 12.2(17d)SXB11a, RELEASE SOFTWARE (fc1)".

 B. Eckler
Engineering Application Services
GENERAL DYNAMICS C4 Systems

SolarWinds Orion Core 2010.1.0, NPM 10.0.0, NTA 3.6

  • | Post Points: 1

578 Posts
Points 3,349
ecklerwr1 replied on Thu, Mar 18 2010 11:26 AM
rated by 0 users

As you can see I'm running a newer -33 version and everything seems to work as expected.

 B. Eckler
Engineering Application Services
GENERAL DYNAMICS C4 Systems

SolarWinds Orion Core 2010.1.0, NPM 10.0.0, NTA 3.6

  • | Post Points: 1
Page 1 of 1 (6 items) | RSS

© 2003 - 2010 SolarWinds, Inc. All Rights Reserved.

Who is SolarWinds?

SolarWinds is rewriting the rules for how companies manage their networks. Guided by a global community of network engineers, SolarWinds develops simple and powerful network management software and network monitoring software for networks of all sizes. SolarWinds also offers a network certification program to become a SolarWinds Certified Professional (SCP).

What is thwack?

thwack, SolarWinds online community site, was designed by network engineers, for network engineers. thwack is a vibrant, growing community of more than 30,000 IT pros who share a passion for technology.

Explore Resources, Answers, Templates, and Advice

Download Free Networking Tools

Learn More About SolarWinds Products