I don't know what "mls netflow interface" is or does.  Perhaps my IOS version 
does something similar with different syntax.

Nonetheless...  I don't see a flow version specified.  Stick with v5 unless you 
need something v9 provides (and ntop consumes).

If you want to post a capture of a flow record I'll compare to mine - or you 
can compare to the docs on v5 records.  Also, you may want to delete all 
netflow confs in ntop and start over.  Other than that I'm running out ideas.  
It pretty much just works IF the flow exporters are configured correctly for 
your environment.

----- Original Message -----
From: [email protected] <[email protected]>
To: [email protected] <[email protected]>
Sent: Wed Jul 14 15:17:36 2010
Subject: Re: [Ntop] Ntop 3.4-pre3 and Netflow problem: thousands of 
"interfaces" ?

Hello,

On our Catalyst 6500 the only options that are available are:

6500A(config)#mls flow ip ?
  interface-destination         interface-destination flow keyword
  interface-destination-source  interface-destination-source flow keyword
  interface-full                interface-full flow keyword
  interface-source              interface-source only flow keyword

So it seems that "mls flow ip full" is not available.

Here is the netflow config that was provided to me by my colleague from the
networking team:

    mls netflow interface
    mls flow ip interface-full

Regards,
Marc.


On 10-07-13 14:54, Gary Gatten at [email protected] wrote :

> In my CAT I have "mls flow ip full".  LanCope recommends: "mls flow ip
> interface-full"
> 
> I *think* I started with the "interface-full" and switched back to "full" for
> some reason - probably testing that I didn't follow up on.
> 
> FYI: 
> http://netflowninjas.lancope.com/blog/2010/05/always-use-mls-flow-ip-interface
> full-when-enabling-netflow-on-the-catalyst-6500.html


_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop





<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 
1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."
</font>

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to