cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
761
Views
0
Helpful
5
Replies

why the flow of netflow collect not equal the flow of snmp polling

QFX527518
Level 1
Level 1

by use the cisco 7606.【Version 12.2(33)SRB5,Supervisor Engine 32 10GE】,when uset netflow collect the flow of app,and use snmp get the port traffic.but now,the flow of netflow not equal the traffic of snmp polling.why.

under is the router's config:

--------------------------------

mls ip slb purge global

mls ip multicast flow-stat-timer 9

mls flow ip interface-full

mls nde sender version 5

no mls acl tcam share-global

mls cef error action reset

interface FastEthernet1/0/0

ip address x.x.x.x 255.255.255.252

ip flow ingress

speed 100

full-duplex

mls netflow sampling

!

interface FastEthernet1/0/1

ip address x.x.x.x 255.255.255.252

ip accounting output-packets

ip flow ingress

no ip mroute-cache

speed 100

full-duplex

mls netflow sampling

!

interface ATM1/1/0

no ip address

ip flow ingress

atm sonet stm-1

no atm enable-ilmi-trap

no atm ilmi-keepalive

!

interface ATM1/1/0.1 point-to-point

bandwidth 24000

ip address x.x.x.x 255.255.255.252

ip accounting output-packets

ip flow ingress

no atm enable-ilmi-trap

mls netflow sampling

!

ip flow-export source Loopback0

ip flow-export version 5

ip flow-export destination x.x.x.x 9996

ip flow-export destination x.x.x.x 9996

5 Replies 5

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello Qing,

>> mls netflow sampling

this means that not all packets are processed by netflow but only one every N packets.

This has been introduced first on Cisco 12000.

It is a measure of scalability on devices that are hardware based the netflow process cannot be implemented in HW so for providing netflow stats without impacting on the high performance of linecards sampling has been introduced.

The price to pay is that short life flows like a DNS request are missed but it is used also on service provider networks.

Hope to help

Giuseppe

thx.when i delete mls netflow samping.question is still.

help!

Hello Qing,

I'm afraid I was not able to explain the question.

netflow sampling can be a need in your platform.

if one every 100 packets is sampled processed by netflow you should see a flow of 100 MB as a flow of 1 MB

Hope to help

Giuseppe

thx。now the problem have been resolved.

under the global config add command :

mls aging long 64
mls aging normal 32

Hello Qing,

interesting feedback: so after disabling sampled netflow and adding these two commands you see netflow stats that match snmp stats?

according to netflow command reference disabling sampled netflow is needed for the two commands to have effect

see

http://www.cisco.com/en/US/docs/ios/netflow/command/reference/nf_02.html#wp1012247

Hope to help

Giuseppe

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: