IP Netflow - timestamps for the flow

[fawad.alam]

Hi there,

I am curious to find out if there is any option to record flow timestamp in Netflow. I have enabled it on Catalyst 6500 switch using version 5. The output of "sh ip cache flow" does not display session timestamp - start and finish time. Is there a way to enable it? Can I see it if I export the flow to a reporter server?

Would appreciate your response!

Thanks,

Fawad

[jakewilson]

Hi Fawad,

Yes, flowStartSysUpTime and flowEndSysUpTime are both exported in EPOCH format. Not all NetFlow rporting tools display it. Below is a screen capture from Scrutinizer NetFlow analyzer.

I hope this helps.

Jake