cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
602
Views
0
Helpful
2
Replies

Netflow on Nexus7000

datacenter
Level 1
Level 1

Hi There,

not sure it this is the right place.. 

We have configured the Netflow on a uplink interface of N7K to Datacenter to have some visibility on Solarwinds, but there are almost no traffic on SolarWinds (and that's not possible).

So we made a test with Cat2960XR and we can see the output from it (and there are 'good graphics' on SolarWinds). Also we can see some output on CLI
Cat2960X#show flow monitor monitor1 cache format table
DATALINK ETHERTYPE DATALINK MAC SR
================== ================
0x0800 C400.AD28.2BC0 FFFF.FFFF.FFFF
<...>

But the equivalent command on N7K does not show anything. No output...
N7K# show flow monitor monitor1 cache detailed
N7K#

config below... can someone help ?

 

================

feature netflow
flow exporter export1
destination 10.0.0.1
transport udp 2055
source loopback0
version 9
flow record record1
match ipv4 source address
match ipv4 destination address
match ip protocol
match ip tos
match transport source-port
match transport destination-port
collect routing source as
collect routing destination as
collect routing next-hop address ipv4
collect transport tcp flags
collect counter bytes
collect counter packets
collect timestamp sys-uptime first
collect timestamp sys-uptime last
collect flow sampler id
sampler sample1
mode 1 out-of 4956
flow monitor monitor1
record record1
exporter export1
!
! one interface as an example
!
interface Ethernet1/1
description ### Uplink To DC ###
bfd interval 300 min_rx 300 multiplier 3
ip flow monitor monitor1 input sampler sample1
no ip redirects
ip address 10.2.9.2/31
no ipv6 redirects
no shutdown

 

 

 

2 Replies 2

M02@rt37
VIP
VIP

Hello @datacenter,

It's possible that the cache size is set to a small value, which could cause the cache to fill up quickly and overwrite old flows before they can be exported.

On your flow monitor called "monitor1" please add:

cache entries 1000000
cache timeout active 15
cache timeout inactive 15 cache timeout rate-limit 2000 

Also decrease the value on your sampler called "sample1":

sampler sample1
mode 1 out-of 256

Best regards
.ı|ı.ı|ı. If This Helps, Please Rate .ı|ı.ı|ı.

Thank you for the reply,

I could find all commands, but the cache command I could not find:

cache entries 1000000
N7K(config)# flow monitor monitor1
N7K(config-flow-monitor)# ?
description Provide a description for this Flow Monitor
exporter Add an Exporter to use to export records
no Negate a command or set its defaults
record Specify Flow Record to use
end Go to exec mode
exit Exit from command interpreter
pop Pop mode from stack or restore from name
push Push current mode to stack or save it under name
where Shows the cli context you are in

N7K(config-flow-monitor)#