×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Netflow on Cat 4510R+E with IOS-XE

Unanswered Question
Feb 12th, 2012
User Badges:

I am trying to figure out the Flexible Net-flow on Cat 4510R+E Switch running IOS-XE code. My Neflow flow software is manageengine 7.X. I am able to see the netflow interfaces but the traffic itself is not displayed. On the Switch I can see the netflow exporter statistics counter being incremented thereby confirming as being exported.


Could anyone help me out on this ?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Don Jacob Tue, 02/14/2012 - 03:10
User Badges:
  • Bronze, 100 points or more

Hi,


Are you using the netflow-original record or have you  created a custom flow record? For a custom record, ensure all necessary  data fields have been added. A sample config for a custom record is as  below:


cisco_281(config)#flow record ManageEngineRec

cisco_281(config-flow-record)#match ipv4 source address

cisco_281(config-flow-record)#match ipv4 destination address

cisco_281(config-flow-record)#match transport source-port

cisco_281(config-flow-record)#match transport destination-port

cisco_281(config-flow-record)#match interface input

cisco_281(config-flow-record)#match ipv4 protocol

cisco_281(config-flow-record)#match ipv4 tos

cisco_281(config-flow-record)#match ipv4 dscp

cisco_281(config-flow-record)#match  application name   

cisco_281(config-flow-record)#collect routing source as

cisco_281(config-flow-record)#collect routing destination as

cisco_281(config-flow-record)#collect routing next-hop address ipv4

cisco_281(config-flow-record)#collect transport tcp flags

cisco_281(config-flow-record)#collect counter bytes

cisco_281(config-flow-record)#collect counter packets

cisco_281(config-flow-record)#collect timestamp sys-uptime first

cisco_281(config-flow-record)#collect timestamp sys-uptime last

cisco_281(config-flow-record)#collect interface output

cisco_281(config-flow-record)#collect flow direction

cisco_281(config-flow-record)#collect ipv4 id

cisco_281(config-flow-record)#collect ipv4 source mask

cisco_281(config-flow-record)#collect ipv4 destination mask


If this does not work, please try with the "netflow-original" record.  You can see the  config example under the sample config section in the  below blog (though it is for Nexus, the flow record, exporter and  monitor part should work)

https://blogs.manageengine.com/netflowanalyzer/2010/05/06/cisco-nexus-and-netflow-analyzer-bandwidth-monitoring


If that too fails, support team at ManageEngine ([email protected]) should be able to help.


Regards,

Don Thomas Jacob

www.netflowanalyzer.com



NOTE: Please rate posts and close questions if your query has been answered

jakewilson Tue, 02/14/2012 - 12:00
User Badges:

Hello,


I hope Don's suggestion helps. 


If you can't get it working, send me a packet capture and I'll run it through Scrutinizer NetFlow Analyzer to see if i can figure it out. 


Jake

Actions

This Discussion