Hi,
I have configured a router to export flow data using both Flexible Netflow and ipfix. The options application-attribute template is not being exported. Verified that the template does exist:
bas-2911-vg03#show flow export JEENetFlow-to-OrionNBAR template
Flow Exporter JEENetFlow-to-OrionNBAR:
Client: Option options application-name
Exporter Format: IPFIX (Version 10)
Template ID : 256
Source ID : 0
Record Size : 83
Template layout
_____________________________________________________________________________
| Field | ID | Ent.ID | Offset | Size |
-----------------------------------------------------------------------------
| APPLICATION ID | 95 | | 0 | 4 |
| application name | 96 | | 4 | 24 |
| application description | 94 | | 28 | 55 |
-----------------------------------------------------------------------------
Client: Option options application-attributes
Exporter Format: IPFIX (Version 10)
Template ID : 257
Source ID : 0
Record Size : 130
Template layout
_____________________________________________________________________________
| Field | ID | Ent.ID | Offset | Size |
-----------------------------------------------------------------------------
| APPLICATION ID | 95 | | 0 | 4 |
| application category name | 12232 | 9 | 4 | 32 |
| application sub category name | 12233 | 9 | 36 | 32 |
| application group name | 12234 | 9 | 68 | 32 |
| p2p technology | 288 | | 100 | 10 |
| tunnel technology | 289 | | 110 | 10 |
| encrypted technology | 290 | | 120 | 10 |
-----------------------------------------------------------------------------
Client: Flow Monitor JEENetFlow-MonitorNBAR
Exporter Format: IPFIX (Version 10)
Template ID : 258
Source ID : 0
Record Size : 34
Template layout
_____________________________________________________________________________
| Field | ID | Ent.ID | Offset | Size |
-----------------------------------------------------------------------------
| ipv4 source address | 8 | | 0 | 4 |
| ipv4 destination address | 12 | | 4 | 4 |
| interface input snmp | 10 | | 8 | 4 |
| transport source-port | 7 | | 12 | 2 |
| transport destination-port | 11 | | 14 | 2 |
| ip tos | 5 | | 16 | 1 |
| ip protocol | 4 | | 17 | 1 |
| counter bytes | 1 | | 18 | 4 |
| counter packets | 2 | | 22 | 4 |
| application id | 95 | | 26 | 4 |
| interface output snmp | 14 | | 30 | 4 |
-----------------------------------------------------------------------------
Flow and application name templates are being exported and the application-attributes has 0
Flow Exporter JEENetFlow-to-OrionNBAR:
Packet send statistics (last cleared 02:18:39 ago):
Successfully sent: 5256 (1799959 bytes)
Client send statistics:
Client: Option options application-name
Records added: 13483
- sent: 13483
Bytes added: 1119089
- sent: 1119089
Client: Option options application-attributes
Records added: 0
Bytes added: 0
Client: Flow Monitor JEENetFlow-MonitorNBAR
Records added: 12300
- sent: 12300
Bytes added: 418200
- sent: 418200
Version:
bas-2911-vg03#show ver
Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.4(3)M7, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2017 by Cisco Systems, Inc.
Compiled Thu 02-Feb-17 21:48 by prod_rel_team
ROM: System Bootstrap, Version 15.0(1r)M15, RELEASE SOFTWARE (fc1)
bas-2911-vg03 uptime is 4 days, 11 hours, 2 minutes
System returned to ROM by reload at 09:16:49 UTC Thu Jul 27 2017
System image file is "flash0:c2900-universalk9-mz.SPA.154-3.M7.bin"
Last reload type: Normal Reload
Last reload reason: Reload Command
Flow configuration:
flow exporter JEENetFlow-to-OrionNBAR
destination 10.199.25.30
source GigabitEthernet0/2
transport udp 4739
export-protocol ipfix
template data timeout 60
option application-table timeout 60
option application-attributes timeout 120
!
!
flow record JEENBARipv4
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
collect interface output
collect counter bytes
collect counter packets
collect application name
!
!
flow monitor JEENetFlow-MonitorNBAR
description Original Netflow captures
exporter JEENetFlow-to-OrionNBAR
cache timeout inactive 10
cache timeout active 60
record JEENBARipv4
!
