netflow destination AS empty

aruldaspr · ‎05-13-2009

Dear All,

pls help

when i want to create report of traffic which is going out of my network,it seems in the netflow analizer report with destnation AS empty. (using manage engine analyzer7 professional plus trialversion)

Cisco 6509 config

interface port-channel 2

ip route-cache flow.

ip flow -export source loopback 0

ip flow -export version 5 orgin-as

ip flow -export destination x.x.x.x 9996

Giuseppe Larosa · ‎05-13-2009

Hello Aruldaspr,

on a C6509 you need to configure also NDE export because it is a multilayer switch and real traffic is processed by PFC

see

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/configuration/guide/nde.html#wp1140493

Additional NDE Fields

You can configure NDE to populate the following additional fields in the NDE packets:

•IP address of the next hop router

•Egress interface SNMP ifIndex

•BGP AS

Hope to help

Giuseppe