Also, I don't know if this helps:
#show mls nde
Netflow Data Export enabled
Exporting flows to x.x.x.x (9995)
Exporting flows from y.y.y.y (51392)
Version: 5
Layer2 flow creation is disabled
Layer2 flow export is disabled
Include Filter not configured
Exclude Filter not configured
Total Netflow Data Export Packets are:
0 packets, 0 no packets, 0 records
Total Netflow Data Export Send Errors:
IPWRITE_NO_FIB = 0
IPWRITE_ADJ_FAILED = 0
IPWRITE_PROCESS = 0
IPWRITE_ENQUEUE_FAILED = 0
IPWRITE_IPC_FAILED = 0
IPWRITE_OUTPUT_FAILED = 0
IPWRITE_MTU_FAILED = 0
IPWRITE_ENCAPFIX_FAILED = 0
Netflow Aggregation Disabled
On 2/19/07, John Fraizer <[EMAIL PROTECTED]> wrote:
> First off, what do you see when you execute "sh ip cache flow" on the
> router(s) in question?
>
> Next, is it possible that by default, your IOS is sampling flows rather than
> giving you 1:1 flows? That's something that caught me off guard going from
> 75xx series to much larger routers like the 12408 and 76xx series.
>
>
> John Fraizer
> Sr. Network Engineer
> Network Operations Engineering
> NuVox Communications
> FCNSA #FCA2566
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Max Clark
> Sent: Monday, February 19, 2007 11:00 PM
> To: [email protected]
> Subject: [Nfsen-discuss] Missing Something Basic
>
> Hi all,
>
> I installed and configured nfsen quite some time ago on a FreeBSD box
> (nfsen-1.2.4.20060412) I haven't really had the time to look at it
> since and now that we have some significant traffic to analyze things
> are not looking right (to clarify the nfcapd process is running, the
> web interface works, rrds update, etc...). Before I go to far all ip
> flow/mls configuration is below (and I have added "ip route-cache
> flow" to all of our interfaces to transit networks):
>
> ip flow-cache entries 131072
> ip flow-cache timeout active 5
> mls rp ip
> mls ip multicast flow-stat-timer 9
> mls aging fast time 30 threshold 64
> mls aging long 900
> mls aging normal 32
> no mls netflow
> mls flow ip interface-full
> no mls flow ipv6
> mls nde sender version 5
> no mls acl tcam share-global
> mls cef error action freeze
>
> ip flow-export source Loopback0
> ip flow-export version 5 origin-as
> ip flow-export destination x.x.x.x 9995
>
> I'm convinced that something is configured wrong because almost 2 Gbit
> of IP Traffic equates to these sized files on the nfsen box (see
> below) and when I look at the Packets/s graph it is reporting in the
> hundreds when I know on interface is pushing over 200k.
>
> -rw-r--r-- 1 www www 343K Feb 20 03:05 nfcapd.200702200300
> -rw-r--r-- 1 www www 319K Feb 20 03:10 nfcapd.200702200305
> -rw-r--r-- 1 www www 326K Feb 20 03:15 nfcapd.200702200310
> -rw-r--r-- 1 www www 345K Feb 20 03:20 nfcapd.200702200315
>
> What should I be looking at to troubleshoot/fix this?
>
> Thanks in advance,
> Max
>
> p.s. I'm running 122-18.SXF3 on a Cisco 6509 w/ a Sup 720 3BXL
>
> Cisco Internetwork Operating System Software IOS (tm) s72033_rp
> Software (s72033_rp-ADVENTERPRISEK9_WAN-M), Version 12.2(18)SXF3,
> RELEASE SOFT)
>
> --
> Max Clark
> http://www.clarksys.com
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Nfsen-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>
>
--
Max Clark
http://www.clarksys.com
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
