10-31-2007 04:11 AM
Hello.
I issue the command "debug ip flow export", and get this output
===============================================
Oct 31 17:36:39.355: IPFLOW: Sending UDP export pak 14 to 192.168.1.2
port 6000 reason 4
===============================================
What does "reason 4" mean, please?
Where can I find definition about the meaning of these "reason"
numbers?
Thank you.
10-31-2007 06:54 AM
0: FLOW_EXPORT_FORCED, Packet export triggered by CLI action (export
version has changed so send the pak belonging to the old version and put
any data for the new version in a new pak.)
1: FLOW_EXPORT_RECORD_FULL_BEFORE, Packet is full before filling data
(we have data to add but we need to send the existing pak as the data
doesn't fit.)
2: FLOW_EXPORT_RECORD_FULL_AFTER, Record is full after filling data (we
have added data to the pak and it is now full so send it)
3 :FLOW_EXPORT_RECORD_FULL_V9, Record is full during v9 tpl export (we
are resending templates and the pak does not have room for the next v9
template so send it and start a new pak).
4 :FLOW_EXPORT_RECORD_OLD Record is too old (send if it has been around
for more than 10s)
10-31-2007 06:56 PM
Hello, davistan.
I just make an experiment. I leave the active/inactive timeout as default, that is 30 min for active timout and 15 sec for inactive.
First I make a flow using ping, after that, there is no other flow on the subnet, and wait the first flow to expire.
After the first flow expire, I notice that every 26 or 27 sec, a "reason 4" packet is sent out. Besides, this interval rises as the inactive timeout rises. In other words, it is "inactive timeout value" plus 11 or 12 sec. e.g If I set inactive timeout to 30, then every 42 sec, a "reason 4" packet is sent out.
That's strange.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide