Hello, My company has a server of FreeBSD system. It runs flow-capture to receive netflow exports at port 2055 from a router of Cisco 12008 . It runs well for one years. But since last day 16:00, the ft file size becomes small than before, about just one half of the previous file at the same time in every day. The analysis reports show that flow output decreases to zero nearly and flow input is unchanged.
I examined the server and it seems normal without any trouble. So I doubt something is wrong in the router. But my fellow told me he just checked one interface in down status on the router, such as "no shut down" and "shut down" it at 16:00 or so last day. And the interface doesn't sample flow data all along. Nothing else is done on the router. Router logging at that time shows as following, SLOT 3:Nov 4 15:48:44.088 c12k: %LCGE-6-GBIC_OIR: 3 Port Gigabit Ethernet GBIC inserted in port 1 SLOT 3:Nov 4 16:07:56.297 c12k: %LC-6-PSA_UNLOAD_UCODE: Unloading (GE: 128 Input ACL) bundle from the PSA SLOT 3:Nov 4 16:07:56.297 c12k: %LC-6-PSA_LOAD_UCODE: Loading (BUNDLE_ge_vanilla) bundle into the PSA SLOT 3:Nov 4 16:07:58.317 c12k: %LC-6-PSA_UNLOAD_UCODE: Unloading (BUNDLE_ge_vanilla) bundle from the PSA SLOT 3:Nov 4 16:07:58.317 c12k: %LC-6-PSA_LOAD_UCODE: Loading (GE: 128 Output ACL) bundle into the PSA SLOT 3:Nov 4 16:07:58.317 c12k: %LC-6-PSA_UCODE_NO_SUPPORT: Current bundle does NOT support (Multicast throttling) SLOT 4:Nov 4 16:08:02.105 c12k: %LC-6-PSA_UNLOAD_UCODE: Unloading (GE: 128 Output ACL) bundle from the PSA SLOT 4:Nov 4 16:08:02.105 c12k: %LC-6-PSA_LOAD_UCODE: Loading (GE: PIRC) bundle into the PSA SLOT 4:Nov 4 16:08:02.105 c12k: %LC-6-PSA_UCODE_NO_SUPPORT: Current bundle does NOT support (Multicast throttling) SLOT 4:Nov 4 16:08:02.105 c12k: %LC-6-PSA_UCODE_NO_SUPPORT: Current bundle does NOT support (Sampled Netflow) SLOT 3:Nov 4 16:08:02.381 c12k: %LC-6-PSA_UNLOAD_UCODE: Unloading (GE: 128 Output ACL) bundle from the PSA SLOT 3:Nov 4 16:08:02.381 c12k: %LC-6-PSA_LOAD_UCODE: Loading (BUNDLE_ge_vanilla) bundle into the PSA Nov 4 16:08:31.334 c12k: %SYS-5-CONFIG_I: Configured from console by vty0 Nov 4 16:10:25.830 c12k: %GRPGE-6-SYNC_LOSS: Interface GigabitEthernet3/1: Loss of Sync Nov 4 16:10:25.834 c12k: %GRPGE-6-RX_LOS: Interface GigabitEthernet3/1: Detected RX Loss of Signal Nov 4 16:10:26.838 c12k: %GRPGE-6-GBIC_TX_FAULT: Interface GigabitEthernet3/1: GBIC TX Fault OK Nov 4 16:10:27.710 c12k: %LINK-3-UPDOWN: Interface GigabitEthernet3/1, changed state to down Nov 4 16:10:31.834 c12k: %SYS-5-CONFIG_I: Configured from console by vty0 I don't know what reason it is. Anyone can give me an advice for troubleshooting? Thanks, Suogang _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
