ello,
We have a Cisco Nexus 6000 switch and have been using Netflow commands on it.
Those commands can only be applied on Interface Vlans, it seems, not on physical ports.
We are also using Scrutinizer (Plixer) as the flow collector.
Our switch's interface Vlan 253 is configured as follows:
interface Vlan10
description SERVER
no shutdown
ip flow monitor NEXUS6000 input sampler WORD
no ip redirects
ip address 10.0.0.1/24
Now, we have a server connected to a switchport of the same Vlan, with IP address 10.0.0.50.
That server is sending much backup traffic every day, which exits from switch port Eth1/30, with a rate of 15Mbps.
The result is that Scrutinizer shows only traffic concerning interface Vlan10 (10.0.0.1/24) and thus we cannot see this whole amount of 15Mbps of traffic. Instead, we see just some minor traffic of 1Mbps, which apparently matches interface Vlan10.
My questions:
1. Can we confirm that Nexus 6000 do not support netflow for physical ports?
2. I am apparently missing something very basic in the fact that a server's traffic is not displayed while we are monitoring the respective interface Vlan's traffic. I suspect that since we are monitoring the interface vlan via Netflow, in Scrutinizer we will just see the traffic originating and terminating to that Vlan's IP address (10.0.0.1/24) and not ANY other traffic from a server within the same Vlan. Is that correct?
Thank you in advance,
George
