08-26-2010 10:29 AM
I have a 7600 running 12.2(33)SRE1. I was wondering why mls nde export statistics aren't incrementing.
I have the following configured:
ip flow-export source Loopback3
ip flow-export version 5
ip flow-export destination 192.168.2.200 9995
mls flow ip interface-full
no mls flow ipv6
mls nde sender
mls sampling time-based 512
I have Vlan interfaces with ip flow ingress configured.
interface Vlan804
ip address 192.168.4.1 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
ip verify unicast source reachable-via any allow-default
ip flow ingress
load-interval 30
end
A show ip flow export shows me exported flows... the counters increment
RTR7600#show ip flow export
Flow export v5 is enabled for main cache
Export source and destination details :
VRF ID : Default
Source(1) 192.168.100.1 (Loopback3)
Destination(1) 192.168.2.200 (9995)
Version 5 flow records
315756904 flows exported in 10536943 udp datagrams
0 flows failed due to lack of export packet
0 export packets were sent up to process level
0 export packets were dropped due to no fib
0 export packets were dropped due to adjacency issues
0 export packets were dropped due to fragmentation failures
0 export packets were dropped due to encapsulation fixup failures
0 export packets were dropped enqueuing for the RP
0 export packets were dropped due to IPC rate limiting
0 export packets were dropped due to Card not being able to export
A show mls nde shows me nothing
RTR7600#show mls nde
Netflow Data Export enabled
Exporting flows to 192.168.2.200 (9995)
Exporting flows from 192.168.100.1 (62867)
Version: 7
Layer2 flow creation is disabled
Layer2 flow export is disabled
Include Filter not configured
Exclude Filter not configured
Total Netflow Data Export Packets are:
0 packets, 0 no packets, 0 records
Total Netflow Data Export Send Errors:
IPWRITE_NO_FIB = 0
IPWRITE_ADJ_FAILED = 0
IPWRITE_PROCESS = 0
IPWRITE_ENQUEUE_FAILED = 0
IPWRITE_IPC_FAILED = 0
IPWRITE_OUTPUT_FAILED = 0
IPWRITE_MTU_FAILED = 0
IPWRITE_ENCAPFIX_FAILED = 0
IPWRITE_CARD_FAILED = 0
Netflow Aggregation Disabled
Do the versions need to match? Is that what is preventing the mls nde export? Any suggestions or tips for troubleshooting this?
show mls netflow table-contention summary
Earl in Module 1
Summary of Netflow CAM Utilization (as a percentage)
====================================================
TCAM Utilization : 0%
ICAM Utilization : 0%
Netflow Creation Failures : 0
Netflow CAM aliases : 0
Earl in Module 2
Summary of Netflow CAM Utilization (as a percentage)
====================================================
TCAM Utilization : 19%
ICAM Utilization : 0%
Netflow Creation Failures : 0
Netflow CAM aliases : 0
Earl in Module 3
Summary of Netflow CAM Utilization (as a percentage)
====================================================
TCAM Utilization : 56%
ICAM Utilization : 0%
Netflow Creation Failures : 0
Netflow CAM aliases : 0
Earl in Module 5
Summary of Netflow CAM Utilization (as a percentage)
====================================================
TCAM Utilization : 16%
ICAM Utilization : 0%
Netflow Creation Failures : 0
Netflow CAM aliases : 0
Earl in Module 6
Summary of Netflow CAM Utilization (as a percentage)
====================================================
TCAM Utilization : 0%
ICAM Utilization : 0%
Netflow Creation Failures : 0
Netflow CAM aliases : 0
Thank you,
Danny
09-01-2010 12:14 PM
I did set the mls nde sender version to match up with netflow, but the real resolution to this problem was an extra command that was needed. I have time-based sampling turned on globally and I'm running a version of 1.2(33)SR code above SRB. You have to turn on "mls netflow sampling" under the layer 3 interfaces that you want nde export under for newer version of code. In the past, you could enable sampling globally, and it would work. Now you have to enable sampling globally AND turn on sampling under each interface. The code I'm running is SRE1.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide