Re: [c-nsp] Counters for null0?

2009-08-06 Thread Goulet, Brian
BGP shows up on our 7200s as Local (addresses changed): Cisco-7200sh ip cache flow | inc 00B3 Gi0/3.123 100.100.10.219 Local 100.100.10.200 06 8355 00B365 EIGRP is Null, though: Cisco-7200sh ip cache flow | inc 224.0 Gi0/1.11 100.100.10.111 Null 224.0.0.10

Re: [c-nsp] Counters for null0?

2009-08-05 Thread Arie Vayner (avayner)
: Wednesday, August 05, 2009 13:33 To: cisco-nsp Subject: [c-nsp] Counters for null0? Hi, is there any way to see how much traffic is going to null0 interface? I configured several routes to be forwarded to null0 and I would like to have some info about how much traffic is going there. If the IOS doesn't

Re: [c-nsp] Counters for null0?

2009-08-05 Thread masood
-Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of luismi Sent: Wednesday, August 05, 2009 13:33 To: cisco-nsp Subject: [c-nsp] Counters for null0? Hi, is there any way to see how much traffic is going to null0

Re: [c-nsp] Counters for null0?

2009-08-05 Thread Hank Nussbacher
...@puck.nether.net] On Behalf Of luismi Sent: Wednesday, August 05, 2009 13:33 To: cisco-nsp Subject: [c-nsp] Counters for null0? Hi, is there any way to see how much traffic is going to null0 interface? I configured several routes to be forwarded to null0 and I would like to have some info about how much

Re: [c-nsp] Counters for null0?

2009-08-05 Thread luismi
Yes, but I just can see the output counters growing up. Quite strange since null0 is not generating traffic and it has configured no ip unreachables. El mié, 05-08-2009 a las 12:47 +0200, Arie Vayner (avayner) escribió: Did you try looking at show interface null0? I am not sure it works, but

Re: [c-nsp] Counters for null0?

2009-08-05 Thread luismi
I just configure a router here to use it but it is quite strange because I can see correct traffic routed to null, and I didn't expect to see that, I don't think it is correct. #sho ip cache flow | incl Null Fa0/1.1 10.55.0.32 Null 208.67.222.222 11 0A2A 0035 1 Fa0/1.1

Re: [c-nsp] Counters for null0?

2009-08-05 Thread Julio Arruda
luismi wrote: I just configure a router here to use it but it is quite strange because I can see correct traffic routed to null, and I didn't expect to see that, I don't think it is correct. #sho ip cache flow | incl Null Fa0/1.1 10.55.0.32 Null 208.67.222.222 11 0A2A 0035

Re: [c-nsp] Counters for null0?

2009-08-05 Thread Pierfrancesco Caci
:- luismi == luismi asturlui...@gmail.com writes: I just configure a router here to use it but it is quite strange because I can see correct traffic routed to null, and I didn't expect to see that, I don't think it is correct. #sho ip cache flow | incl Null Fa0/1.1

Re: [c-nsp] Counters for null0?

2009-08-05 Thread Rodney Dunn
There are scenarios (nat, acl drops, etc.) where the dst in the netflow will show null. For a transit packet that is forwarded out will not (should not) show Null. Rodney luismi wrote: I just configure a router here to use it but it is quite strange because I can see correct traffic routed

Re: [c-nsp] Counters for null0?

2009-08-05 Thread Pierfrancesco Caci
:- luismi == luismi asturlui...@gmail.com writes: Yes, but I just can see the output counters growing up. Quite strange since null0 is not generating traffic and it has configured no ip unreachables. yes, output counters are those that have a meaning. it's traffic that's

Re: [c-nsp] Counters for null0?

2009-08-05 Thread John Kougoulos
I think it will also show Null when it is forwarded but goes through a permit ACL with log keyword John On Wed, 5 Aug 2009, Rodney Dunn wrote: There are scenarios (nat, acl drops, etc.) where the dst in the netflow will show null. For a transit packet that is forwarded out will not

Re: [c-nsp] Counters for null0?

2009-08-05 Thread luismi
Yes, this is a NAT scenario, maybe that is the reason. So far the router is working ok, and the service is ok too. So null value must be related with NAT or something similar. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Counters for null0?

2009-08-05 Thread Roland Dobbins
On Aug 5, 2009, at 9:01 PM, luismi wrote: So null value must be related with NAT or something similar. Most Cisco routers (the main exceptions being 6500/7600/4500 switches, with their well-known NetFlow caveats regarding dropped traffic) show the destination ifindex as 0 when the

Re: [c-nsp] Counters for null0?

2009-08-05 Thread luismi
Yes it is being translated by NAT for sure, I am 110% sure about that. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Counters for null0?

2009-08-05 Thread Gert Doering
Hi, On Wed, Aug 05, 2009 at 08:49:50AM -0400, Julio Arruda wrote: Isn't all process switched/punted traffic reported as ifout == Null in Netflow ? If a given IOS version does that, it's a bug. ifout = NULL usually means traffic dropped due to ACL or no route. gert -- USENET is *not* the

Re: [c-nsp] Counters for null0?

2009-08-05 Thread Julio Arruda
Gert Doering wrote: Hi, On Wed, Aug 05, 2009 at 08:49:50AM -0400, Julio Arruda wrote: Isn't all process switched/punted traffic reported as ifout == Null in Netflow ? If a given IOS version does that, it's a bug. ifout = NULL usually means traffic dropped due to ACL or no route. gert

Re: [c-nsp] Counters for null0?

2009-08-05 Thread Julio Arruda
Gert Doering wrote: Hi, On Wed, Aug 05, 2009 at 08:49:50AM -0400, Julio Arruda wrote: Isn't all process switched/punted traffic reported as ifout == Null in Netflow ? If a given IOS version does that, it's a bug. ifout = NULL usually means traffic dropped due to ACL or no route. gert

Re: [c-nsp] Counters for null0?

2009-08-05 Thread Gert Doering
Hi, On Wed, Aug 05, 2009 at 11:07:09AM -0400, Julio Arruda wrote: On Wed, Aug 05, 2009 at 08:49:50AM -0400, Julio Arruda wrote: Isn't all process switched/punted traffic reported as ifout == Null in Netflow ? If a given IOS version does that, it's a bug. ifout = NULL usually means

Re: [c-nsp] Counters for null0?

2009-08-05 Thread Julio Arruda
Gert Doering wrote: Hi, On Wed, Aug 05, 2009 at 11:07:09AM -0400, Julio Arruda wrote: On Wed, Aug 05, 2009 at 08:49:50AM -0400, Julio Arruda wrote: Isn't all process switched/punted traffic reported as ifout == Null in Netflow ? If a given IOS version does that, it's a bug. ifout = NULL

Re: [c-nsp] Counters for null0?

2009-08-05 Thread Gert Doering
Hi, On Wed, Aug 05, 2009 at 12:05:32PM -0400, Julio Arruda wrote: BGP shows up on our 7200s as Local (addresses changed): Cisco-7200sh ip cache flow | inc 00B3 Gi0/3.123 100.100.10.219 Local 100.100.10.200 06 8355 00B3 65 Gi0/1.11 100.100.10.46 Local