01-11-2010 02:26 AM - edited 03-06-2019 09:14 AM
Hi all,
I wonder about the difference between "ip cache flow" and "mls netflow"
i have uased "ip cache flow, ip route-cache flow, sh ip cache flow" to check what kind of traffic is passed around the network
but these days,
i know there is another configruation to grap the traffic. => "mls netflow"
in cat6500, cisco7600 with sup720
mls netflow
mls flow ip interface-full
PE006#sh mls netflow ip
Displaying Netflow entries in Supervisor Earl
DstIP SrcIP Prot:SrcPort:DstPort Src i/f :AdjPtr
-----------------------------------------------------------------------------
Pkts Bytes Age LastSeen Attributes
---------------------------------------------------
80.1.105.127 60.1.105.57 61 Gi3/3.105 :0x0
1 152 3 19:15:03 L3 - Dynamic
80.1.104.127 60.1.104.57 61 Gi3/3.104 :0x0
1 146 3 19:15:03 L3 - Dynamic
above output is similar with it of the show ip cache flow
PE006#sh ip cache flow
-------------------------------------------------------------------------------
MSFC:
IP packet size distribution (768049 total packets):
1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480
.000 .001 .016 .015 .015 .015 .015 .015 .015 .015 .015 .015 .015 .015 .017
-------------- omitted-------------------------
SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts
Gi3/3.104 60.1.104.60 Null 70.1.106.237 3D 0000 0000 1
Gi3/3.104 60.1.104.61 Null 70.1.106.236 3D 0000 0000 1
what is the difference between ip cache flow and mls netflow?
who's knows about this?
is it same?
thanks for reading my poor English
Solved! Go to Solution.
01-11-2010 02:39 AM
Hello Sanghee,
>> in cat6500, cisco7600 with sup720
these devices are multilayer switches MLS =Multi Layer Switching.
The sup720 can be seen as made of different intelligent components: the SP, switching processor, the MSFC3, that is the routing engine, the PFC, policy feature card that is the multilayer switching engine.
So in this context the commands for netflow can be directed to the MSFC like ip route-cache flow, but there are also commands to instruct the PFC to allow for netflow accounting during MLS operations.
see
the command mls flow ip interface-full provides a way to configure the detail level for netflow accounting.
see table 50-4 for the meaning of the commands you have noted
mls netflow enables netflow on the PFC that is the MLS engine
Hope to help
Giuseppe
01-11-2010 02:39 AM
Hello Sanghee,
>> in cat6500, cisco7600 with sup720
these devices are multilayer switches MLS =Multi Layer Switching.
The sup720 can be seen as made of different intelligent components: the SP, switching processor, the MSFC3, that is the routing engine, the PFC, policy feature card that is the multilayer switching engine.
So in this context the commands for netflow can be directed to the MSFC like ip route-cache flow, but there are also commands to instruct the PFC to allow for netflow accounting during MLS operations.
see
the command mls flow ip interface-full provides a way to configure the detail level for netflow accounting.
see table 50-4 for the meaning of the commands you have noted
mls netflow enables netflow on the PFC that is the MLS engine
Hope to help
Giuseppe
01-11-2010 08:15 PM
many thanks
it's very useful for me.
thanks again.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: