Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

Blue

Not seeing certain traffic in NetFlow cache

Could anyone explain why I do not see the pretty constant traffic between a remote IP camera and the backend in NetFlow cache, but I do see the icmp traffic once I ping the camera?

4 REPLIES
Bronze

Re: Not seeing certain traffic in NetFlow cache

Hello,

1. Where are you checking netflow traffic? On the collector or on the router via show ip cache)

2. Did you enable netflow on all interfaces? If you have 6500/7600 also enable mls nde ...

Kind regards,

Jan Nejman

Caligare, Co.

http://www.caligare.com/

Blue

Re: Not seeing certain traffic in NetFlow cache

I'm looking both on the router and on the collector (GUI). On the router, I'm using "show ip cache verbose flow" and "show mls netflow ip [source/destination]", which show the icmp traffic as soon as I start pinging.

NetFlow is enabled on all interfaces, and in both software and hardware cache.

Bronze

Re: Not seeing certain traffic in NetFlow cache

If I clearly understand, you are able to see icmp pings on your router but not in collector GUI. Is it correct? Could you send me output of the:

show runn | inc mls

show runn | inc flow

Thank you,

Jan Nejman

Caligare, Co.

Blue

Re: Not seeing certain traffic in NetFlow cache

Jan,

You misunderstood. I see icmp pings (generated by myself) on both the router and the collector GUI. The problem is I don't see the alleged video traffic on either the router or the collector.

show runn | inc mls

...

mls aging fast threshold 64

mls aging long 128

mls aging normal 64

mls flow ip interface-full

no mls flow ipv6

mls nde sender version 5

...

show runn | incl flow

...

ip flow-cache timeout inactive 64

ip flow-cache timeout active 3

mls flow ip interface-full

no mls flow ipv6

ip route-cache flow

(repeat for each interface)...

ip route-cache flow

ip flow-export source Loopback0

ip flow-export version 5

ip flow-export destination xx.xx.xx.xx 9###

144
Views
0
Helpful
4
Replies