Hello,
I have 2 quick questions about the output of flow-export that I am hoping
someone on this list can help me with.
1) When flow-export reports the *next-hop* IP as 0.0.0.0 and/or the
output interface as 0, what does this mean?
On Ciscos, output interface 0 also means "packet dropped" (either no route to destination/FIB failure, or packet filtered). Sometimes it'd be nice to be able to say "I dont care about seeing these exports", alas it is not so.
2) And, what does a flow *destination* IP of 0.0.0.0 imply?
Not sure! I'd be interested to know what device the exports are coming from. On Supervisor 2/720 on Cat6500, you can sometimes get various fields set to zeroes if your hardware flowmask is set in such a way as that information is not recorded, but destination IP should generally always be in the flow.
If you're using a Cat6500, what is your 'flowmask' set to?
Thanks! Anukool
-andrew
_______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
