MLS IP flows

patward · ‎12-10-2003

6509 running Integrated IOS 12.1(13)E6 (c6sup22-js-mz.121-13.E6.bin). In the config : mls flow ip full.

1. sh mls ip so 127.0.0.1 count

Displaying Netflow entries in Supervisor Earl

Number of shortcuts = 12164

sh mls ip so 127.0.0.1

Displaying Netflow entries in Supervisor Earl

DstIP SrcIP Prot:SrcPort:DstPort Src i/f:AdjPtr

--------------------------------------------------------------------

Pkts Bytes Age LastSeen Attributes

---------------------------------------------------

132.204.251.219 127.0.0.1 tcp :www :1874 0 : 0

63 2520 179 14:32:38 L3 - Dynamic

132.204.138.184 127.0.0.1 tcp :www :1431 0 : 0

1 40 38 14:34:59 L3 - Dynamic

What are those flows ?

2. Why is the Source i/f always 0 ?

3. Even with a "ter width 160" the lines are (around) 60 chars long. ???

vkapoor5 · ‎12-16-2003

Just wondering if it is related to any communication destined for or originated by the switch. More information about the configuration may bee needed to find the details.

patward · ‎12-16-2003

What part of the configuration would be interesting ?

There's no 127.0.0.1 in the config. So like you say it's probably due to some internal process. And guess what : after a reset (last friday), there is no more of those 127.0.0.1 flows (for the moment).

???