cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1253
Views
0
Helpful
1
Replies

NDE on 7600

loughlind
Level 1
Level 1

I have a 7600 running 12.2(33)SRE1. I was wondering why mls nde export statistics aren't incrementing.

I have the following configured:

ip flow-export source Loopback3
ip flow-export version 5
ip flow-export destination 192.168.2.200 9995

mls flow ip interface-full
no mls flow ipv6
mls nde sender
mls sampling time-based 512

I have Vlan interfaces with ip flow ingress configured.

interface Vlan804
ip address 192.168.4.1 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
ip verify unicast source reachable-via any allow-default
ip flow ingress
load-interval 30
end

A show ip flow export shows me exported flows... the counters increment

RTR7600#show ip flow export
Flow export v5 is enabled for main cache
  Export source and destination details :
  VRF ID : Default
    Source(1)       192.168.100.1 (Loopback3)
    Destination(1)  192.168.2.200 (9995)
  Version 5 flow records
  315756904 flows exported in 10536943 udp datagrams
  0 flows failed due to lack of export packet
  0 export packets were sent up to process level
  0 export packets were dropped due to no fib
  0 export packets were dropped due to adjacency issues
  0 export packets were dropped due to fragmentation failures
  0 export packets were dropped due to encapsulation fixup failures
  0 export packets were dropped enqueuing for the RP
  0 export packets were dropped due to IPC rate limiting
  0 export packets were dropped due to Card not being able to export

A show mls nde shows me nothing

RTR7600#show mls nde
Netflow Data Export enabled
Exporting flows to  192.168.2.200 (9995)
Exporting flows from 192.168.100.1 (62867)
Version: 7
Layer2 flow creation is disabled
Layer2 flow export is disabled
Include Filter not configured
Exclude Filter not configured
Total Netflow Data Export Packets are:
    0 packets, 0 no packets, 0 records
Total Netflow Data Export Send Errors:
        IPWRITE_NO_FIB = 0
        IPWRITE_ADJ_FAILED = 0
        IPWRITE_PROCESS = 0
        IPWRITE_ENQUEUE_FAILED = 0
        IPWRITE_IPC_FAILED = 0
        IPWRITE_OUTPUT_FAILED = 0
        IPWRITE_MTU_FAILED = 0
        IPWRITE_ENCAPFIX_FAILED = 0
        IPWRITE_CARD_FAILED = 0
Netflow Aggregation Disabled

Do the versions need to match? Is that what is preventing the mls nde export? Any suggestions or tips for troubleshooting this?

show mls netflow table-contention summary
Earl in Module 1
Summary of Netflow CAM Utilization (as a percentage)
====================================================
TCAM Utilization             :   0%
ICAM Utilization             :   0%
Netflow Creation Failures    :   0
Netflow CAM aliases          :   0
Earl in Module 2
Summary of Netflow CAM Utilization (as a percentage)
====================================================
TCAM Utilization             :   19%
ICAM Utilization             :   0%
Netflow Creation Failures    :   0
Netflow CAM aliases          :   0
Earl in Module 3
Summary of Netflow CAM Utilization (as a percentage)
====================================================
TCAM Utilization             :   56%
ICAM Utilization             :   0%
Netflow Creation Failures    :   0
Netflow CAM aliases          :   0
Earl in Module 5
Summary of Netflow CAM Utilization (as a percentage)
====================================================
TCAM Utilization             :   16%
ICAM Utilization             :   0%
Netflow Creation Failures    :   0
Netflow CAM aliases          :   0
Earl in Module 6
Summary of Netflow CAM Utilization (as a percentage)
====================================================
TCAM Utilization             :   0%
ICAM Utilization             :   0%
Netflow Creation Failures    :   0
Netflow CAM aliases          :   0

Thank you,

Danny

1 Reply 1

loughlind
Level 1
Level 1

I did set the mls nde sender version to match up with netflow, but the real resolution to this problem was an extra command that was needed.  I have time-based sampling turned on globally and I'm running a version of 1.2(33)SR code above SRB. You have to turn on "mls netflow sampling" under the layer 3 interfaces that you want nde export under for newer version of code.  In the past, you could enable sampling globally, and it would work. Now you have to enable sampling globally AND turn on sampling under each interface.  The code I'm running is SRE1.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: