06-05-2013 01:20 AM - edited 03-07-2019 01:43 PM
HI all,
We have Cisco Catalyst 6509-V-E VSS Switch with Sup2T und IOS Version 15.0(1)SY2. We are gettin input netflwo information from the gi2/3/7 but not output ... I am not sure why it does not work..
Any suggestion?
Thank you
flow record HERZOG-FLOW
match ipv4 tos
match ipv4 dscp
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
match flow sampler
match flow direction
collect routing source as
collect routing destination as
collect routing next-hop address ipv4
collect ipv4 source prefix
collect ipv4 source mask
collect ipv4 destination prefix
collect ipv4 destination mask
collect transport tcp flags
collect counter bytes
collect counter packets
collect timestamp sys-uptime first
collect timestamp sys-uptime last
!
!
flow exporter uxs-10-netmanag
description Netflow zu uxs-10-netmanag
destination 172.18.3.5
transport udp 9996
!
flow platform cache timeout inactive 60
flow platform cache timeout active 60
flow platform cache timeout fast
!
flow monitor WAN-MON
record HERZOG-FLOW
exporter uxs-10-netmanag
interface GigabitEthernet2/3/47
description MUE-BAY 100Mbit
no switchport
ip address 192.168.100.13 255.255.255.252
ip flow monitor WAN-MON input
ip flow monitor WAN-MON output
ip ospf dead-interval 15
ip ospf hello-interval 3
speed 100
duplex full
GigabitEthernet2/3/47 is up, line protocol is up (connected)
Hardware is C6k 1000Mb 802.3, address is 0008.e3ff.fc28 (bia 0008.e3ff.fc28)
Description: MUE-BAY 100Mbit
Internet address is 192.168.100.13/30
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, media type is 10/100/1000BaseT
input flow-control is off, output flow-control is off
Clock mode is auto
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:01, output never, output hang never
Last clearing of "show interface" counters 26w0d
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 561
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
L2 Switched: ucast: 0 pkt, 0 bytes - mcast: 0 pkt, 0 bytes
L3 in Switched: ucast: 11842386 pkt, 3739088417 bytes - mcast: 0 pkt, 0 bytes
L3 out Switched: ucast: 12443569 pkt, 4743938166 bytes - mcast: 0 pkt, 0 bytes
21417279 packets input, 5587723277 bytes, 0 no buffer
Received 9569028 broadcasts (2 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 0 multicast, 0 pause input
0 input packets with dribble condition detected
23592289 packets output, 6859404875 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 PAUSE output
0 output buffer failures, 0 output buffers swapped out
GigabitEthernet2/3/47 is up, line protocol is up (connected)
Hardware is C6k 1000Mb 802.3, address is 0008.e3ff.fc28 (bia 0008.e3ff.fc28)
Description: MUE-BAY 100Mbit
Internet address is 192.168.100.13/30
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, media type is 10/100/1000BaseT
input flow-control is off, output flow-control is off
Clock mode is auto
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:01, output never, output hang never
Last clearing of "show interface" counters 26w0d
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 561
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
L2 Switched: ucast: 0 pkt, 0 bytes - mcast: 0 pkt, 0 bytes
L3 in Switched: ucast: 11842386 pkt, 3739088417 bytes - mcast: 0 pkt, 0 bytes
L3 out Switched: ucast: 12443569 pkt, 4743938166 bytes - mcast: 0 pkt, 0 bytes
21417279 packets input, 5587723277 bytes, 0 no buffer
Received 9569028 broadcasts (2 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 0 multicast, 0 pause input
0 input packets with dribble condition detected
23592289 packets output, 6859404875 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 PAUSE output
0 output buffer failures, 0 output buffers swapped out
06-05-2013 11:07 PM
Can you try adding "collect interface output" to your flow record configuration and check?
Regards,
Don Thomas Jacob
http://www.solarwinds.com/netflow-traffic-analyzer.aspx
NOTE: Please rate and close questions if you found any of the answers helpful.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide