cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
950
Views
0
Helpful
4
Replies

Not seeing certain traffic in NetFlow cache

yjdabear
VIP Alumni
VIP Alumni

Could anyone explain why I do not see the pretty constant traffic between a remote IP camera and the backend in NetFlow cache, but I do see the icmp traffic once I ping the camera?

4 Replies 4

Jan Nejman
Level 3
Level 3

Hello,

1. Where are you checking netflow traffic? On the collector or on the router via show ip cache)

2. Did you enable netflow on all interfaces? If you have 6500/7600 also enable mls nde ...

Kind regards,

Jan Nejman

Caligare, Co.

http://www.caligare.com/

I'm looking both on the router and on the collector (GUI). On the router, I'm using "show ip cache verbose flow" and "show mls netflow ip [source/destination]", which show the icmp traffic as soon as I start pinging.

NetFlow is enabled on all interfaces, and in both software and hardware cache.

If I clearly understand, you are able to see icmp pings on your router but not in collector GUI. Is it correct? Could you send me output of the:

show runn | inc mls

show runn | inc flow

Thank you,

Jan Nejman

Caligare, Co.

Jan,

You misunderstood. I see icmp pings (generated by myself) on both the router and the collector GUI. The problem is I don't see the alleged video traffic on either the router or the collector.

show runn | inc mls

...

mls aging fast threshold 64

mls aging long 128

mls aging normal 64

mls flow ip interface-full

no mls flow ipv6

mls nde sender version 5

...

show runn | incl flow

...

ip flow-cache timeout inactive 64

ip flow-cache timeout active 3

mls flow ip interface-full

no mls flow ipv6

ip route-cache flow

(repeat for each interface)...

ip route-cache flow

ip flow-export source Loopback0

ip flow-export version 5

ip flow-export destination xx.xx.xx.xx 9###