Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

Cisco WLC AVC netflow fields

Hello

I'm roadtesting Cisco Prime Assurance (Prime Infrastructure 2.0 has a 60 day Assurance licence). I'm exporting  netflow data from a WLAN (5508 running 7.4.110.0) and I can see this data in Prime ok. The only issue is that destination IP is not included. The document below:

http://www.cisco.com/en/US/prod/collateral/wireless/ps6302/ps8322/ps12722/qa_c67-722538_ps10315_Products_Q_and_A_Item.html

states that:

Following are the unique field included in Cisco WLC flow packet.

• applicationTag
• ipDiffServCodePoint
• octetDeltaCount
• packetDeltaCount
• postIpDiffServCodePoint
• staIPv4Address
• staMacAddress
• wlanSSID
• wtpMacAddress

Is there plans to increase the fields sent in WLC netflow in future releases? I haven't tried releases 7.5 or 6 - can anyone telll me if the netflow fileds in these releases are the same as 7.4?

Thanks

Andy

  • Getting Started with Wireless
1 ACCEPTED SOLUTION

Accepted Solutions
VIP Purple

Cisco WLC AVC netflow fields

Hi Andy,

Yes, In legacy controllers (5508,2504, WiSM2) these field are in the packet headers of a Netflow packet. As you can see it is not standard v9 netflow packet. Due to this you can export WLC netflow to a cutomized flow collector like Prime (Scrutizer would work, refer below).

http://mrncciew.com/2013/02/13/who-really-support-wlc-netflow/

There are no difference in 7.5 or 7.6 what you see in 7.4.

In NGWC (5760,3850) this is standard netflow v9 & you should see the standard netflow headers including dst address. See below

http://mrncciew.com/2013/10/07/3850-flexible-netflow/

HTH

Rasika

*** Pls rate all useful responses ****

2 REPLIES
VIP Purple

Cisco WLC AVC netflow fields

Hi Andy,

Yes, In legacy controllers (5508,2504, WiSM2) these field are in the packet headers of a Netflow packet. As you can see it is not standard v9 netflow packet. Due to this you can export WLC netflow to a cutomized flow collector like Prime (Scrutizer would work, refer below).

http://mrncciew.com/2013/02/13/who-really-support-wlc-netflow/

There are no difference in 7.5 or 7.6 what you see in 7.4.

In NGWC (5760,3850) this is standard netflow v9 & you should see the standard netflow headers including dst address. See below

http://mrncciew.com/2013/10/07/3850-flexible-netflow/

HTH

Rasika

*** Pls rate all useful responses ****

Cisco WLC AVC netflow fields

Thanks a lot Rasika. Interesting links - may deploy some 3850s soon so thats good information.

Cheers

Andy

613
Views
0
Helpful
2
Replies
This widget could not be displayed.