I'm trying to get some netflow stats from a 6513 using VS-S720-10G sup's (we're not using the vs functionality). I've configured the following:
mls nde send version 7
mls nde interface
mls agingtime long 64
mls agingtime fast 16 0
ip flow-export version 9
ip flow-export source vlan 101
ip flow-export destination 10.255.0.43 9995
ip flow-cache timeout active 1
and on the interfaces i want to gather netflow info:
ie interface atm4/0/0.53
ip flow ingress
I seem to be getting some netflow data but it doesn't appear to be all the flow information. I want to see all the application traffic flows. All i'm seeing is ntp, eigrp, icmp etc nothing for other tcp protocols. Am i missing something?
One potential explanation of this symptom can be the fact NetQoS RA only keeps the top-50 flows for each interface after 4 hrs (RA 7.x) or 24 hrs (RA 8.x). In RA 8.x, this can be vividly seen in the many gaps in the trend plots of flows, as they fall in or out of the top-50 bucket. In RA 7.x, the gaps were plotted as zero, so the graphs were smooth/gapless.
We are pleased to announce availability of Beta software for 16.6.3. 16.6.3 will be the second rebuild on the 16.6 release train targeted towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are looking for early feedback from custome...