ANNOUNCEMENT - The community will be down for maintenace this Thursday August 13 from 12:00 AM PT to 02:00 AM PT. As a precaution save your work.
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
146
Views
0
Helpful
0
Replies
Highlighted
Beginner

Prime Infrastructure 3.1 Netflow numbers off by an order of magnitude

My company has a Cisco ASR 1001 Router that is sending netflow data to a cisco prime infrastructure installation and to a riverbed steelcentral collector (appresponse). There exists a rather large discrepancy between what the two platforms show as far as traffic breakdowns, where the riverbed appliance shows what I expect to see and the prime appliance shows the application numbers as being wrong by a factor of 10 or more. The below two screen snips were taken within 30 seconds of each other.

 

Inkedtop-n-apps_LI.jpg

 

There is no way that this router is pumping ~300Mbps of traffic that is just VPN_AnyC (custom group to match traffic to our VPN server). I get the impression that Prime is double counting this some how but am not sure why or how.

 

The below image shows the actual TX and RX rates, which I can verify as being correct. The total link speed is 700Mbps for context. The numbers from the above app category tally up to more than 700Mbps, which is clearly wrong in my eyes.intf-tx-rt.png

 

Is this something I should open a TAC case for or are there any known fixes for this issue?

Everyone's tags (2)