Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

netflow version 5 sampling

I have created a sampler map and applied it on the interface and got the flows exported. However when I capture the flows in wireshark i cannot see the sampling information on the header.

My configuration is

cisco2811#sh flo

cisco2811#sh flow-sampler

Sampler : nfa, id : 1, packets matched : 2484, mode : random sampling mode

sampling interval is : 100


cisco2811#sh run | incl flow

flow-sampler-map nfa

flow-sampler nfa

ip flow-export version 5

ip flow-export destination 9996

cisco2811#sh ip flow export

Flow export v5 is enabled for main cache

Exporting flows to (9996)

Exporting using source IP address

Version 5 flow records

1800 flows exported in 197 udp datagrams

0 flows failed due to lack of export packet

1 export packets were sent up to process level

0 export packets were dropped due to no fib

0 export packets were dropped due to adjacency issues

0 export packets were dropped due to fragmentation failures

0 export packets were dropped due to encapsulation fixup failures

My version is:

Cisco IOS Software, 2800 Software (C2800NM-SPSERVICESK9-M), Version 12.4(3i), RELEASE SOFTWARE (fc2)

Technical Support:

Copyright (c) 1986-2007 by Cisco Systems, Inc.

Compiled Wed 28-Nov-07 21:09 by stshen

ROM: System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)

Is there any special commands required to populate the sampling interval in the v5 header?


Re: netflow version 5 sampling

Make sure Modular Gigabit Ethernet doesn't support Netflow record.

Specifies a statistical sampling NetFlow export random sampling mode and a packet interval.

mode random one-out-of packet-interval


Router(config-sampler-map)# mode random one-out-of 100

The random keyword specifies that sampling uses the random sampling mode.

The one-out-of packet-interval argument-keyword pair specifies the packet interval (one out of every n packets) from which to sample. For n, you can specify from 1 to 65535 (packets).

For further information click this link.

New Member

Re: netflow version 5 sampling

I have done that. I have created a flow sampler map through that command. However I am not able to see the sampler interval in the netflow V5 packet. In the doc it says you can see the sampling interval in the padding field of the netflow v5 packet.