cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
506
Views
0
Helpful
1
Replies

Not getting output netwflow information

Jozef Staruch
Level 1
Level 1

HI all,

We have Cisco Catalyst 6509-V-E VSS Switch with Sup2T und IOS Version 15.0(1)SY2.  We are gettin input netflwo information from the gi2/3/7 but not output ... I am not sure why it does not work..

Any suggestion?

Thank you

flow record HERZOG-FLOW

match ipv4 tos

match ipv4 dscp

match ipv4 protocol

match ipv4 source address

match ipv4 destination address

match transport source-port

match transport destination-port

match interface input

match flow sampler

match flow direction

collect routing source as

collect routing destination as

collect routing next-hop address ipv4

collect ipv4 source prefix

collect ipv4 source mask

collect ipv4 destination prefix

collect ipv4 destination mask

collect transport tcp flags

collect counter bytes

collect counter packets

collect timestamp sys-uptime first

collect timestamp sys-uptime last

!

!

flow exporter uxs-10-netmanag

description Netflow zu uxs-10-netmanag

destination 172.18.3.5

transport udp 9996

!

flow platform cache timeout inactive 60

flow platform cache timeout active 60

flow platform cache timeout fast

!

flow monitor WAN-MON

record HERZOG-FLOW

            exporter uxs-10-netmanag

interface GigabitEthernet2/3/47

description MUE-BAY 100Mbit

no switchport

ip address 192.168.100.13 255.255.255.252

ip flow monitor WAN-MON input

ip flow monitor WAN-MON output

ip ospf dead-interval 15

ip ospf hello-interval 3

speed 100

            duplex full

GigabitEthernet2/3/47 is up, line protocol is up (connected)

  Hardware is C6k 1000Mb 802.3, address is 0008.e3ff.fc28 (bia 0008.e3ff.fc28)

  Description: MUE-BAY 100Mbit

  Internet address is 192.168.100.13/30

  MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,

     reliability 255/255, txload 1/255, rxload 1/255

  Encapsulation ARPA, loopback not set

  Keepalive set (10 sec)

  Full-duplex, 100Mb/s, media type is 10/100/1000BaseT

  input flow-control is off, output flow-control is off

  Clock mode is auto

  ARP type: ARPA, ARP Timeout 04:00:00

  Last input 00:00:01, output never, output hang never

  Last clearing of "show interface" counters 26w0d

  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 561

  Queueing strategy: fifo

  Output queue: 0/40 (size/max)

  5 minute input rate 0 bits/sec, 0 packets/sec

  5 minute output rate 0 bits/sec, 0 packets/sec

  L2 Switched: ucast: 0 pkt, 0 bytes - mcast: 0 pkt, 0 bytes

  L3 in Switched: ucast: 11842386 pkt, 3739088417 bytes - mcast: 0 pkt, 0 bytes

  L3 out Switched: ucast: 12443569 pkt, 4743938166 bytes - mcast: 0 pkt, 0 bytes

     21417279 packets input, 5587723277 bytes, 0 no buffer

     Received 9569028 broadcasts (2 IP multicasts)

     0 runts, 0 giants, 0 throttles

     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored

     0 watchdog, 0 multicast, 0 pause input

     0 input packets with dribble condition detected

     23592289 packets output, 6859404875 bytes, 0 underruns

     0 output errors, 0 collisions, 0 interface resets

     0 babbles, 0 late collision, 0 deferred

     0 lost carrier, 0 no carrier, 0 PAUSE output

     0 output buffer failures, 0 output buffers swapped out

GigabitEthernet2/3/47 is up, line protocol is up (connected)

  Hardware is C6k 1000Mb 802.3, address is 0008.e3ff.fc28 (bia 0008.e3ff.fc28)

  Description: MUE-BAY 100Mbit

  Internet address is 192.168.100.13/30

  MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,

     reliability 255/255, txload 1/255, rxload 1/255

  Encapsulation ARPA, loopback not set

  Keepalive set (10 sec)

  Full-duplex, 100Mb/s, media type is 10/100/1000BaseT

  input flow-control is off, output flow-control is off

  Clock mode is auto

  ARP type: ARPA, ARP Timeout 04:00:00

  Last input 00:00:01, output never, output hang never

  Last clearing of "show interface" counters 26w0d

  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 561

  Queueing strategy: fifo

  Output queue: 0/40 (size/max)

  5 minute input rate 0 bits/sec, 0 packets/sec

  5 minute output rate 0 bits/sec, 0 packets/sec

  L2 Switched: ucast: 0 pkt, 0 bytes - mcast: 0 pkt, 0 bytes

  L3 in Switched: ucast: 11842386 pkt, 3739088417 bytes - mcast: 0 pkt, 0 bytes

  L3 out Switched: ucast: 12443569 pkt, 4743938166 bytes - mcast: 0 pkt, 0 bytes

     21417279 packets input, 5587723277 bytes, 0 no buffer

     Received 9569028 broadcasts (2 IP multicasts)

     0 runts, 0 giants, 0 throttles

     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored

     0 watchdog, 0 multicast, 0 pause input

     0 input packets with dribble condition detected

     23592289 packets output, 6859404875 bytes, 0 underruns

     0 output errors, 0 collisions, 0 interface resets

     0 babbles, 0 late collision, 0 deferred

     0 lost carrier, 0 no carrier, 0 PAUSE output

     0 output buffer failures, 0 output buffers swapped out

1 Reply 1

Don Jacob
Level 1
Level 1

Can you try adding "collect interface output" to your flow record configuration and check?

Regards,
Don Thomas Jacob
http://www.solarwinds.com/netflow-traffic-analyzer.aspx

NOTE: Please rate and close questions if you found any of the answers helpful.

Regards, Don Thomas Jacob http://www.solarwinds.com/netflow-traffic-analyzer.aspx Head Geek @ SolarWinds NOTE: Please rate and close questions if you found any of the answers helpful.
Review Cisco Networking for a $25 gift card