Cisco 6500 Netflow table utilization logs

[humayunkr]

Hi

we are getting log messages like

%EARL-DFC4-4-NF_USAGE: Current Netflow Table Utilization is 95%

%EARL-DFC4-4-NF_USAGE: Current Netflow Table Utilization is 99%

Can anyone tell me what this messages really means and how to get rid of

these messages. We are using IOS version 12.2(33)SXJ in Catalyst 6500.

Thanks,

Humayun

[Edison Ortiz]

Depending on your PFC, your netflow table can range from 128k to 256k entries.

It seems you are capturing too much data and your mls aging setting isn't as aggressive as it should.

By default, the aging is 5 minutes and it could be changed to something more aggressive in order to export the data much quicker.

If your aging is already set to an aggressive timer (the most aggressive timer is 32 seconds), then I recommend collecting less netflow data by modifying the mls flow ip command from 'interface-full' to other less demanding setting.

Regards,

Edison

[humayunkr]

Thanks for your reply. We have changed the aging time now and right now still those logs are coming but less frequently than before. Do you know if we can modify the netflow table range entries or how to see netflow table range entries.

Thanks,

Humayun

[Edison Ortiz]

You can not modify the table ranges, those are ASICs.

The command to see this table is:

sh mls netflow table-contention summary

Please remember to rate helpful posts.