Interface Stats and Cache Flow Stats are different
i use a C2611XM in our Backbone. Version: IOS (tm) C2600 Software (C2600-IS-M), Version 12.2(13b).
At the Fa0/1(and only there) we use "ip route-cache flow". In Combination with "ip flow-export" we get an unrealistic sum of bytes passing this Interface at our accounting system. Please see the difference between the stats for "show interface fa0/1" and "show ip cache flow" (Totals Line; Total Flows * Flows/Packet * Bytes/Packet).
2611XM#sh int fa0/1
FastEthernet0/1 is up, line protocol is up
Hardware is AmdFE, address is 000c.3085.8d41 (bia 000c.3085.8d41)
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 3/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 1., loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:08, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Re: Interface Stats and Cache Flow Stats are different
I think Netflow only supports IP traffic and it can capture only flows that are switched through the router, but not router generated traffic or other layer2 traffic like CDP, VTP or DTP messages that are exchanged. So you won't be able to see the same value between the two commands if you are using any such scenarios.
We are pleased to announce availability of Beta software for 16.6.3.
16.6.3 will be the second rebuild on the 16.6 release train targeted
towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are
looking for early feedback from customers befor...
Introduction Featured Speakers Luis Espejel is the Telecommunications
Manager of IENova, an Oil & Gas company. Currently he works with Cisco
IOS® and Cisco IOS XE platforms, and NX to some extent. He has also
worked as a Senior Engineer with the Routing P...
In this session you can learn more about Layer 3 multicast and the best
practices to identify possible threats and take security measures. It
provides an overview of basic multicast, the best security practices for
use of this technology, and recommendati...