cache empty on show ip flow

[amralrazzaz]

why cache is empty when i want to check who is the users consuming more bandwidth from internet connection ..why not showing ip addresses for users to monitor the netflow for each user on the interface that i configure already netflow??

Router#show ip flow top-talkers
% Cache is empty

[amralrazzaz]

interface GigabitEthernet0/0
ip address 192.168.2.207 255.255.255.0
ip flow ingress
ip flow egress
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
no mop enabled
ip flow-export source GigabitEthernet0/0
ip flow-export version 9
ip flow-export destination 192.168.2.195 9996
ip flow-top-talkers
top 50
sort-by packets

[Palani Mohan]

Amralrazzaz

What does the output of sh ip cef is telling you? Kindly consider copy/pasting the entire output of

term exec prompt timestamp

show int gig0/0

show ip interface gig0/0

Thanks ... Palani

[amralrazzaz]

Router#show ip interface g0/0
GigabitEthernet0/0 is up, line protocol is up
Internet address is 192.168.2.207/24
Broadcast address is 255.255.255.255
Address determined by non-volatile memory
MTU is 1500 bytes
Helper address is not set
Directed broadcast forwarding is disabled
Multicast reserved groups joined: 224.0.0.9
Outgoing access list is not set
Inbound access list is not set
Proxy ARP is enabled
Local Proxy ARP is disabled
Security level is default
Split horizon is enabled
ICMP redirects are always sent
ICMP unreachables are always sent
ICMP mask replies are never sent
IP fast switching is disabled
IP fast switching on the same interface is disabled
IP Flow switching is disabled
IP CEF switching is disabled
IP Null turbo vector
IP multicast fast switching is enabled
IP multicast distributed fast switching is disabled
IP route-cache flags are Fast
Router Discovery is disabled
IP output packet accounting is disabled
IP access violation accounting is disabled
TCP/IP header compression is disabled
RTP/IP header compression is disabled
Policy routing is disabled
Network address translation is enabled, interface in domain inside
BGP Policy Mapping is disabled
Input features: Common Flow Table, Stateful Inspection, Ingress-NetFlow, Virtual Fragment Reassembly, Virtual Fragment Reassembly After IPSec Decryption, MCI Check
Output features: NAT Inside, Common Flow Table, Stateful Inspection, NAT ALG proxy, Post-Ingress-NetFlow, Egress-Netflow
IPv4 WCCP Redirect outbound is disabled
IPv4 WCCP Redirect inbound is disabled
IPv4 WCCP Redirect exclude is disabled
Router#show int
Router#show interfaces g0/0
GigabitEthernet0/0 is up, line protocol is up
Hardware is CN Gigabit Ethernet, address is d46d.50bc.49f0 (bia d46d.50bc.49f0)
Internet address is 192.168.2.207/24
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full Duplex, 1Gbps, media type is RJ45
output flow-control is unsupported, input flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/62468 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 104000 bits/sec, 33 packets/sec
5 minute output rate 477000 bits/sec, 55 packets/sec
45138641 packets input, 2568207215 bytes, 0 no buffer
Received 451087 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 81090 multicast, 0 pause input
57646463 packets output, 3481233052 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
63491 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out
Router#

[amralrazzaz]

here the full config

interface GigabitEthernet0/0
ip address 192.168.2.207 255.255.255.0
ip flow ingress
ip flow egress
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
no mop enabled
ip flow-export source GigabitEthernet0/0
ip flow-export version 9
ip flow-export destination 192.168.2.195 9996
ip flow-top-talkers
top 50
sort-by packets

[Mark Malone]

right so you only need this config below for top talkers the rest is for export and its correct config
are you generating interesting traffic across g0 to be captured ? run an extended ping across that interface with G0 as the source and see if the cache fills
what device and software is this ?

ip flow-top-talkers
top 50
sort-by packets

interface GigabitEthernet0/0
ip address 192.168.2.207 255.255.255.0
ip flow ingress
ip flow egress

[amralrazzaz]

show version

Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.4(3)M1, RELEASE SOFTWARE (fc1)

Cisco CISCO2911/K9 (revision 1.0) with 483328K/40960K bytes of memory.

483328K + 40960K = 524288kb (512MB)

255488K bytes of ATA System CompactFlash 0 (Read/Write)

255488K (256MB)

Cisco CISCO2911/K9

[Mark Malone]

did you generate traffic accroos that interface from source of it ?

[amralrazzaz]

i already made this configurations

but still empty cache

[paul driver · Accepted solution]

Hello

You need to cef enabled either globally or interface for netflow to work.

res

Paul

[amralrazzaz]

Router#show ip cef
%IPv4 CEF not running
Router#

can u please show me the configuration ????

thanks

[Mark Malone · Accepted solution]

(config)#ip cef

[amralrazzaz]

yes its working thanks

but its not deleted i mean every time when i need to check the netflow i have to write this command or just write the command and do wr it will saved 

[Mark Malone · Accepted solution]

it will always be there once you save it , do wr or do copy run start

[amralrazzaz]

Router#show ip flow top-talkers
% Cache is empty

its deleted again and i cant catch the traffic for each user in network???