Hello folks:   I have a cisco ISR and I configured Netflowv9 on it successfully. I am collecting the data on my Netflow collector without any problems.   However, I am not getting any return to some of my show commands on Cisco ISR router:   isr4300-3977#show ip cache verbose flow IP packet size distribution (0 total packets): 1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 512 544 576 1024 1536 2048 2560 3072 3584 4096 4608 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 IP Flow Switching Cache, 0 bytes 0 active, 0 inactive, 0 added 0 ager polls, 0 flow alloc failures Active flows timeout in 30 minutes Inactive flows timeout in 15 seconds last clearing of statistics never Protocol Total Flows Packets Bytes Packets Active(Sec) Idle(Sec) -------- Flows /Sec /Flow /Pkt /Sec /Flow /Flow SrcIf SrcIPaddress DstIf DstIPaddress Pr TOS Flgs Pkts Port Msk AS Port Msk AS NextHop B/Pk Active   isr4300-3977#show ip top talkers                                     ^ % Invalid input detected at '^' marker.   isr4300-3977#show version Cisco IOS XE Software, Version 03.16.04b.S - Extended Support Release Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.5(3)S4b, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2016 by Cisco Systems, Inc. Compiled Mon 17-Oct-16 20:23 by mcpre ROM: IOS-XE ROMMON   What am I missing? I entered "ip route-cache cef" command under the interface just in case it is required for this command to work. That did not help. To be honest, I did not need "ip route-cache cef" to enable Netflow on this ISR router.    Are these commands not supported on this platform?   Thanks ... View more

As far as I know, the potential values for the flow direction field (Element ID: 61) are "0" and "1" for IPFIX. However, I am seeing something quite different on my ISR 4321. It is configured for IPFIX and for certain flows it reports direction values other than "0" and "1". Followings are a few samples:   {"Header":{"Version":10,"Length":1378,"ExportTime":1557346115,"SequenceNo":413552,"DomainID":6},"DataSets":[[{"I":8,"V":"3.0.6.164"},{"I":12,"V":"100.97.116.97"},{"I":5,"V":98},{"I":4,"V":97},{"I":7,"V":29541},{"I":11,"V":0},{"I":6,"V":"0x00"},{"I":16,"V":"0x0000"},{"I":9,"V":0},{"I":10,"V":0},{"I":95,"V":"0x00000000"},{"I":17,"V":"0x0000"},{"I":15,"V":"0.0.0.0"},{"I":13,"V":0},{"I":14,"V":101},{"I":61,"V":110},{"I":1,"V":8387235708328833893},{"I":2,"V":3275368591795642723},{"I":22,"V":1953066862},{"I":21,"V":1634479457}],[{"I":8,"V":"112.112.115.0"},{"I":12,"V":"0.0.115.113"},{"I":5,"V":108},{"I":4,"V":115},{"I":7,"V":30322},{"I":11,"V":11623},{"I":6,"V":"0x72"},{"I":16,"V":"0x6f75"},{"I":9,"V":112},{"I":10,"V":0},{"I":95,"V":"0x00000000"},{"I":17,"V":"0x0000"},{"I":15,"V":"0.0.0.0"},{"I":13,"V":0},{"I":14,"V":0},{"I":61,"V":0},{"I":1,"V":8390876182754714484},{"I":2,"V":7597412461103113313},{"I":22,"V":1952514048},{"I":21,"V":0}],[{"I":8,"V":"0.0.0.0"},{"I":12,"V":"0.0.0.0"},{"I":5,"V":98},{"I":4,"V":117},{"I":7,"V":29545},{"I":11,"V":28261},{"I":6,"V":"0x73"},{"I":16,"V":"0x732d"},{"I":9,"V":114},{"I":10,"V":1701602678},{"I":95,"V":"0x616e7400"},{"I":17,"V":"0x0000"},{"I":15,"V":"0.0.0.0"},{"I":13,"V":0},{"I":14,"V":0},{"I":61,"V":0},{"I":1,"V":121423020425216},{"I":2,"V":1852768256},{"I":22,"V":0},{"I":21,"V":28271}],[{"I":8,"V":"0.0.0.0"},{"I":12,"V":"0.0.0.0"},{"I":5,"V":13},{"I":4,"V":0},{"I":7,"V":426},{"I":11,"V":25455},{"I":6,"V":"0x6e"},{"I":16,"V":"0x7375"},{"I":9,"V":109},{"I":10,"V":1701981555},{"I":95,"V":"0x74726561"},{"I":17,"V":"0x6d69"},{"I":15,"V":"110.103.0.0"},{"I":13,"V":0},{"I":14,"V":0},{"I":61,"V":0},{"I":1,"V":25455},{"I":2,"V":7958834079207665014},{"I":22,"V":1768187247},{"I":21,"V":762541170}],[{"I":8,"V":"101.97.109.105"},{"I":12,"V":"110.103.0.0"},{"I":5,"V":0},{"I":4,"V":0},{"I":7,"V":0},{"I":11,"V":0},{"I":6,"V":"0x6f"},{"I":16,"V":"0x7468"},{"I":9,"V":101},{"I":10,"V":1912602624},{"I":95,"V":"0x00000000"},{"I":17,"V":"0x0000"},{"I":15,"V":"0.0.0.0"},{"I":13,"V":0},{"I":14,"V":0},{"I":61,"V":0},{"I":1,"V":0},{"I":2,"V":7887329569650074980},{"I":22,"V":1767976307},{"I":21,"V":1953654113}],[{"I":8,"V":"109.105.110.103"},{"I":12,"V":"0.0.0.0"},{"I":5,"V":0},{"I":4,"V":0},{"I":7,"V":0},{"I":11,"V":0},{"I":6,"V":"0x00"},{"I":16,"V":"0x0062"},{"I":9,"V":117},{"I":10,"V":1936289381},{"I":95,"V":"0x73732d69"},{"I":17,"V":"0x7272"},{"I":15,"V":"101.108.101.118"},{"I":13,"V":97},{"I":14,"V":1853095936},{"I":61,"V":0},{"I":1,"V":0},{"I":2,"V":121423020425216},{"I":22,"V":0},{"I":21,"V":1852768256}],[{"I":8,"V":"0.0.0.0"},{"I":12,"V":"0.0.110.111"},{"I":5,"V":0},{"I":4,"V":0},{"I":7,"V":0},{"I":11,"V":0},{"I":6,"V":"0x00"},{"I":16,"V":"0x0003"},{"I":9,"V":0},{"I":10,"V":7301486},{"I":95,"V":"0x7465722d"},{"I":17,"V":"0x7072"},{"I":15,"V":"111.99.101.115"},{"I":13,"V":115},{"I":14,"V":762474595},{"I":61,"V":0},{"I":1,"V":0},{"I":2,"V":25966},{"I":22,"V":1952805488},{"I":21,"V":1919513445}],[{"I":8,"V":"45.116.114.97"},{"I":12,"V":"110.115.97.99"},{"I":5,"V":116},{"I":4,"V":105},{"I":7,"V":28526},{"I":11,"V":24940},{"I":6,"V":"0x2d"},{"I":16,"V":"0x6170"},{"I":9,"V":112},{"I":10,"V":1929379840},{"I":95,"V":"0x6f746865"},{"I":17,"V":"0x7200"},{"I":15,"V":"0.0.0.0"},{"I":13,"V":0},{"I":14,"V":0},{"I":61,"V":0},{"I":1,"V":0},{"I":2,"V":0},{"I":22,"V":1953653102},{"I":21,"V":1935762292}],[{"I":8,"V":"105.111.110.97"},{"I":12,"V":"108.45.100.97"},{"I":5,"V":116},{"I":4,"V":97},{"I":7,"V":0},{"I":11,"V":0},{"I":6,"V":"0x00"},{"I":16,"V":"0x0000"},{"I":9,"V":0},{"I":10,"V":0},{"I":95,"V":"0x00006275"},{"I":17,"V":"0x7369"},{"I":15,"V":"110.101.115.115"},{"I":13,"V":45},{"I":14,"V":1919249509},{"I":61,"V":118},{"I":1,"V":7020676412466003968},{"I":2,"V":0},{"I":22,"V":28271},{"I":21,"V":0}],[{"I":8,"V":"0.0.0.0"},{"I":12,"V":"110.111.0.0"},{"I":5,"V":0},{"I":4,"V":0},{"I":7,"V":0},{"I":11,"V":0},{"I":6,"V":"0x6e"},{"I":16,"V":"0x6f00"},{"I":9,"V":0},{"I":10,"V":0},{"I":95,"V":"0x00000d00"},{"I":17,"V":"0x01ab"},{"I":15,"V":"99.111.110.115"},{"I":13,"V":117},{"I":14,"V":1835364909},{"I":61,"V":115},{"I":1,"V":8390880524866514535},{"I":2,"V":0},{"I":22,"V":0},{"I":21,"V":25455}],[{"I":8,"V":"110.115.117.109"},{"I":12,"V":"101.114.45.118"},{"I":5,"V":105},{"I":4,"V":100},{"I":7,"V":25967},{"I":11,"V":11635},{"I":6,"V":"0x74"},{"I":16,"V":"0x7265"},{"I":9,"V":97},{"I":10,"V":1835626087},{"I":95,"V":"0x00000000"},{"I":17,"V":"0x0000"},{"I":15,"V":"0.0.111.116"},{"I":13,"V":104},{"I":14,"V":1701969920},{"I":61,"V":0},{"I":1,"V":0},{"I":2,"V":0},{"I":22,"V":0},{"I":21,"V":0}],[{"I":8,"V":"109.117.108.116"},{"I":12,"V":"105.109.101.100"},{"I":5,"V":105},{"I":4,"V":97},{"I":7,"V":11635},{"I":11,"V":29810},{"I":6,"V":"0x65"},{"I":16,"V":"0x616d"},{"I":9,"V":105},{"I":10,"V":1852243968},{"I":95,"V":"0x00000000"},{"I":17,"V":"0x0000"},{"I":15,"V":"0.0.0.0"},{"I":13,"V":98},{"I":14,"V":1970497902},{"I":61,"V":101},{"I":1,"V":8319042867598353772},{"I":2,"V":7311138172103032832},{"I":22,"V":0},{"I":21,"V":0}],[{"I":8,"V":"0.0.110.111"},{"I":12,"V":"0.0.0.0"},{"I":5,"V":0},{"I":4,"V":0},{"I":7,"V":0},{"I":11,"V":28271},{"I":6,"V":"0x00"},{"I":16,"V":"0x0000"},{"I":9,"V":0},{"I":10,"V":0},{"I":95,"V":"0x6e6f0000"},{"I":17,"V":"0x0000"},{"I":15,"V":"0.0.0.0"},{"I":13,"V":13},{"I":14,"V":14434},{"I":61,"V":117},{"I":1,"V":8316299568924011873},{"I":2,"V":7954532802822628469},{"I":22,"V":1668573558},{"I":21,"V":1769240877}],[{"I":8,"V":"116.111.111.108"},{"I":12,"V":"115.0.100.101"},{"I":5,"V":115},{"I":4,"V":107},{"I":7,"V":29807},{"I":11,"V":28717},{"I":6,"V":"0x76"},{"I":16,"V":"0x6972"},{"I":9,"V":116},{"I":10,"V":1969319017},{"I":95,"V":"0x7a617469"},{"I":17,"V":"0x6f6e"},{"I":15,"V":"0.0.0.0"},{"I":13,"V":0},{"I":14,"V":0},{"I":61,"V":0},{"I":1,"V":8031158820422025216},{"I":2,"V":0},{"I":22,"V":0},{"I":21,"V":0}],[{"I":8,"V":"0.0.0.0"},{"I":12,"V":"0.0.0.0"},{"I":5,"V":109},{"I":4,"V":117},{"I":7,"V":27764},{"I":11,"V":26989},{"I":6,"V":"0x65"},{"I":16,"V":"0x6469"},{"I":9,"V":97},{"I":10,"V":761491310},{"I":95,"V":"0x66657265"},{"I":17,"V":"0x6e63"},{"I":15,"V":"105.110.103.0"},{"I":13,"V":0},{"I":14,"V":0},{"I":61,"V":0},{"I":1,"V":108256586985061},{"I":2,"V":8319042906034562422},{"I":22,"V":1634628608},{"I":21,"V":0}],[{"I":8,"V":"0.0.0.0"},{"I":12,"V":"0.0.0.0"},{"I":5,"V":0},{"I":4,"V":0},{"I":7,"V":28271},{"I":11,"V":0},{"I":6,"V":"0x00"},{"I":16,"V":"0x0000"},{"I":9,"V":0},{"I":10,"V":28271},{"I":95,"V":"0x00000000"},{"I":17,"V":"0x0000"},{"I":15,"V":"0.0.121.101"},{"I":13,"V":115},{"I":14,"V":0},{"I":61,"V":0},{"I":1,"V":14293654987631},{"I":2,"V":7958834079207664998},{"I":22,"V":1768711469},{"I":21,"V":1936220530}],[{"I":8,"V":"105.110.103.0"},{"I":12,"V":"0.0.0.0"},{"I":5,"V":0},{"I":4,"V":0},{"I":7,"V":0},{"I":11,"V":0},{"I":6,"V":"0x70"},{"I":16,"V":"0x3270"},{"I":9,"V":45},{"I":10,"V":1718185061},{"I":95,"V":"0x2d747261"},{"I":17,"V":"0x6e73"},{"I":15,"V":"102.101.114.0"},{"I":13,"V":0},{"I":14,"V":0},{"I":61,"V":0},{"I":1,"V":0},{"I":2,"V":7453023576123010145},{"I":22,"V":761754223},{"I":21,"V":1970274304}],[{"I":8,"V":"0.0.0.0"},{"I":12,"V":"0.0.0.0"},{"I":5,"V":0},{"I":4,"V":0},{"I":7,"V":0},{"I":11,"V":0},{"I":6,"V":"0x00"},{"I":16,"V":"0x0062"},{"I":9,"V":117},{"I":10,"V":1818963300},{"I":95,"V":"0x61746100"},{"I":17,"V":"0x0000"},{"I":15,"V":"0.0.0.0"},{"I":13,"V":0},{"I":14,"V":0},{"I":61,"V":0},{"I":1,"V":0},{"I":2,"V":108256586985061},{"I":22,"V":1936928105},{"I":21,"V":1920099692}],[{"I":8,"V":"101.118.97.110"},{"I":12,"V":"116.0.0.0"},{"I":5,"V":0},{"I":4,"V":0},{"I":7,"V":0},{"I":11,"V":0},{"I":6,"V":"0x00"},{"I":16,"V":"0x0000"},{"I":9,"V":0},{"I":10,"V":2036691712},{"I":95,"V":"0x00000000"},{"I":17,"V":"0x0000"},{"I":15,"V":"110.111.0.0"},{"I":13,"V":0},{"I":14,"V":0},{"I":61,"V":0},{"I":1,"V":7957579066586955776},{"I":2,"V":3298571220591},{"I":22,"V":1768121645},{"I":21,"V":1634624557}],[{"I":8,"V":"118.105.100.101"},{"I":12,"V":"111.0.0.0"},{"I":5,"V":0},{"I":4,"V":0},{"I":7,"V":0},{"I":11,"V":0},{"I":6,"V":"0x00"},{"I":16,"V":"0x0000"},{"I":9,"V":0},{"I":10,"V":0},{"I":95,"V":"0x636f6e74"},{"I":17,"V":"0x726f"},{"I":15,"V":"108.45.97.110"},{"I":13,"V":100},{"I":14,"V":762538343},{"I":61,"V":110},{"I":1,"V":7020101842059132928},{"I":2,"V":0},{"I":22,"V":1869899877},{"I":21,"V":1912602624}],[{"I":8,"V":"0.0.0.0"},{"I":12,"V":"0.0.0.0"},{"I":5,"V":0},{"I":4,"V":0},{"I":7,"V":0},{"I":11,"V":0},{"I":6,"V":"0x00"},{"I":16,"V":"0x0000"},{"I":9,"V":0},{"I":10,"V":0},{"I":95,"V":"0x00007369"},{"I":17,"V":"0x676e"},{"I":15,"V":"97.108.105.110"},{"I":13,"V":103},{"I":14,"V":0},{"I":61,"V":0},{"I":1,"V":0},{"I":2,"V":0},{"I":22,"V":25205},{"I":21,"V":1936289381}]]}     Line 303: {"AgentID":"180.189.147.26","Header":{"Version":10,"Length":1378,"ExportTime":1557346115,"SequenceNo":413510,"DomainID":6},"DataSets":[[{"I":8,"V":"1.0.0.88"},{"I":12,"V":"110.101.116.45"},{"I":5,"V":97},{"I":4,"V":100},{"I":7,"V":28009},{"I":11,"V":28160},{"I":6,"V":"0x00"},{"I":16,"V":"0x0000"},{"I":9,"V":0},{"I":10,"V":0},{"I":95,"V":"0x00000000"},{"I":17,"V":"0x0000"},{"I":15,"V":"0.0.0.0"},{"I":13,"V":0},{"I":14,"V":114},{"I":61,"V":111},{"I":1,"V":8463505522634354802},{"I":2,"V":8031166508370231296},{"I":22,"V":0},{"I":21,"V":0}],[{"I":8,"V":"0.0.0.0"},{"I":12,"V":"0.0.111.116"},{"I":5,"V":104},{"I":4,"V":101},{"I":7,"V":29184},{"I":11,"V":0},{"I":6,"V":"0x00"},{"I":16,"V":"0x0000"},{"I":9,"V":0},{"I":10,"V":0},{"I":95,"V":"0x00000000"},{"I":17,"V":"0x0000"},{"I":15,"V":"0.0.0.0"},{"I":13,"V":0},{"I":14,"V":0},{"I":61,"V":0},{"I":1,"V":7954892373139548973},{"I":2,"V":7165066978584914944},{"I":22,"V":0},{"I":21,"V":0}],[{"I":8,"V":"0.0.0.0"},{"I":12,"V":"0.0.0.0"},{"I":5,"V":98},{"I":4,"...   This usually happens when the source and destination IPs are some sort of a public IP.   Has anyone else run into this?   Thanks ... View more

Hello folks:   I have this ISR 4321 in my lab and trying to configure it for Netflowv9 with application data. I have two Gig interfaces on this router and I am trying to collect the ingress traffic on both interfaces. I applied the following configuration on it. I am receiving some netflow data but it is having the following issues: Data such as "source port", "direction", "output_snmp" are missing from the netflow packets. I confirmed that my router has NBAR but my netflow v9 packets do not have the information. I receive some application data on my netflow analyzer but they are not delivered as part of a flow. They are delivered as separate netflow packets with the association back to an IP address or flow. It is the application name and some byte count. How can I receive the application information attached to a particular flow? My question is that if I have the correct configuration on my router to resolve the issues listed above? Please note that my "show version" output is at the bottom of this post.   ENABLE NBAR 1. enable 2. configure terminal 3. interface GigabitEthernet0/0/0 4. ip nbar protocol-discovery 5. exit 6. interface GigabitEthernet0/0/1 7. ip nbar protocol-discovery 8. exit 9. exit 10. copy run start   NETFLOW CONFIGURATION flow record netflow-record match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port match ipv4 tos match interface input match application name collect routing source as collect routing destination as collect routing next-hop address ipv4 collect ipv4 source mask collect ipv4 destination mask collect transport tcp flags collect counter bytes long collect counter packets long collect timestamp sys-uptime first collect timestamp sys-uptime last ! flow exporter netflow-exporter description --- XXXXXXX --- destination XX.XX.XX.XX source GigabitEthernet0/0/0 transport udp 4729 export-protocol netflow-v9 template data timeout 60 option application-table timeout 60 option application-attributes timeout 300 ! flow monitor netflow-monitor exporter netflow-exporter cache timeout active 60 cache timeout inactive 15 record netflow-record ! interface GigabitEthernet0/0/0 ip flow monitor netflow-monitor input ! interface GigabitEthernet0/0/1 ip flow monitor netflow-monitor input   ********* *********   isr4300-3977#show version Cisco IOS XE Software, Version 03.16.04b.S - Extended Support Release Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.5(3)S4b, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2016 by Cisco Systems, Inc. Compiled Mon 17-Oct-16 20:23 by mcpre ... View more

Hello,   We read the following article about Netflow v9 on: https://www.cisco.com/en/US/technologies/tk648/tk362/technologies_white_paper09186a00800a3db9.html   and configured netflow on one of our routers. We would like to build a parser to do some in-house development but noticed that some of the fields are reported in Hex. How do we know what fields are reported in HEX and what in decimal? Is this documented cleared somewhere?   Thanks, ... View more

Hello folks:   I keep seeing these two reason codes for status in RIS return. I checked the following but couldn't find them: https://developer.cisco.com/docs/sxml/#!risport70-api-reference/selectcmdeviceext   Where can I find the full list of status codes?   Thanks ... View more

I am looking for the specific termination cause codes reported in CDRs when a call is blocked due to CAC rules on CUCM. Is there a specific one or a range of values?   Thanks, ... View more

Hello folks, What I am looking for is an AXL method that could give me a similar return as what "utils service list" command returns on CLI. Is this possible? Thanks, ... View more

Is there an SQL query to find out the first registration date/time for a phone or user in CUCM database? Thanks, ... View more

Is it possible to access the CMR information for the voice/video sessions via jabber on CUCM11? What methods are there to collect call quality statistics? Thanks, Arda ... View more