what is the difference between "ip cache flow" and "mls netflow"?

Answered Question
Jan 11th, 2010
User Badges:

Hi all,


I wonder about the difference between "ip cache flow" and "mls netflow"


i have uased "ip cache flow, ip route-cache flow, sh ip cache flow" to check what kind of traffic is passed around the network


but these days,

i know there is another configruation to grap the traffic. => "mls netflow"

in cat6500, cisco7600 with sup720


mls netflow

mls flow ip interface-full


PE006#sh mls netflow ip
Displaying Netflow entries in Supervisor Earl
DstIP           SrcIP           Prot:SrcPort:DstPort  Src i/f          :AdjPtr
-----------------------------------------------------------------------------
Pkts         Bytes         Age   LastSeen  Attributes
---------------------------------------------------
80.1.105.127    60.1.105.57     61   Gi3/3.105        :0x0        
1            152           3     19:15:03   L3 - Dynamic
80.1.104.127    60.1.104.57     61   Gi3/3.104        :0x0        
1            146           3     19:15:03   L3 - Dynamic



above output is similar with it of the show ip cache flow


PE006#sh ip cache flow

-------------------------------------------------------------------------------
MSFC:
IP packet size distribution (768049 total packets):
   1-32   64   96  128  160  192  224  256  288  320  352  384  416  448  480
   .000 .001 .016 .015 .015 .015 .015 .015 .015 .015 .015 .015 .015 .015 .017
-------------- omitted-------------------------

SrcIf         SrcIPaddress    DstIf         DstIPaddress    Pr SrcP DstP  Pkts
Gi3/3.104     60.1.104.60     Null          70.1.106.237    3D 0000 0000     1
Gi3/3.104     60.1.104.61     Null          70.1.106.236    3D 0000 0000     1



what is the difference between ip cache flow and mls netflow?


who's knows about this?


is it same?



thanks for reading my poor English

Correct Answer by Giuseppe Larosa about 7 years 6 months ago

Hello Sanghee,

>> in cat6500, cisco7600 with sup720


these devices are multilayer switches MLS =Multi Layer Switching.


The sup720 can be seen as made of different intelligent components: the SP, switching processor, the MSFC3, that is the routing engine, the PFC, policy feature card that is the multilayer switching engine.


So in this context the commands for netflow can be directed to the MSFC like ip route-cache flow, but there are also commands to instruct the PFC to allow for netflow accounting during MLS operations.


see


http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/configuration/guide/netflow.html#wp1148314


the command mls flow ip interface-full provides a way to configure the detail level for netflow accounting.


see table 50-4 for the meaning of the commands you have noted


mls netflow enables netflow on the PFC that is the MLS engine


Hope to help

Giuseppe

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Giuseppe Larosa Mon, 01/11/2010 - 02:39
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

Hello Sanghee,

>> in cat6500, cisco7600 with sup720


these devices are multilayer switches MLS =Multi Layer Switching.


The sup720 can be seen as made of different intelligent components: the SP, switching processor, the MSFC3, that is the routing engine, the PFC, policy feature card that is the multilayer switching engine.


So in this context the commands for netflow can be directed to the MSFC like ip route-cache flow, but there are also commands to instruct the PFC to allow for netflow accounting during MLS operations.


see


http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/configuration/guide/netflow.html#wp1148314


the command mls flow ip interface-full provides a way to configure the detail level for netflow accounting.


see table 50-4 for the meaning of the commands you have noted


mls netflow enables netflow on the PFC that is the MLS engine


Hope to help

Giuseppe

Actions

This Discussion