11-28-2011 08:13 AM - edited 03-07-2019 03:38 AM
Hi
we are getting log messages like
%EARL-DFC4-4-NF_USAGE: Current Netflow Table Utilization is 95%
%EARL-DFC4-4-NF_USAGE: Current Netflow Table Utilization is 99%
Can anyone tell me what this messages really means and how to get rid of
these messages. We are using IOS version 12.2(33)SXJ in Catalyst 6500.
Thanks,
Humayun
11-28-2011 08:24 AM
Depending on your PFC, your netflow table can range from 128k to 256k entries.
It seems you are capturing too much data and your mls aging setting isn't as aggressive as it should.
By default, the aging is 5 minutes and it could be changed to something more aggressive in order to export the data much quicker.
If your aging is already set to an aggressive timer (the most aggressive timer is 32 seconds), then I recommend collecting less netflow data by modifying the mls flow ip command from 'interface-full' to other less demanding setting.
Regards,
Edison
11-29-2011 07:59 AM
Thanks for your reply. We have changed the aging time now and right now still those logs are coming but less frequently than before. Do you know if we can modify the netflow table range entries or how to see netflow table range entries.
Thanks,
Humayun
11-30-2011 07:19 AM
You can not modify the table ranges, those are ASICs.
The command to see this table is:
sh mls netflow table-contention summary
Please remember to rate helpful posts.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide