cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
311
Views
0
Helpful
1
Replies

Netflow on router 3640, 3660 and 4500

rdubo
Level 1
Level 1

Hello,

I try to implement Netflow on the interfaces of a 3660, 3640 and 4500

they are running version

c3640-i-mz.122-2.T

c3640-i-mz.122-2.T

c4500-i-mz.120-16

When I make a show ip cache flow we can't see any traffic comming from dialer interfaces. Is it normal? Is there a bug with the dialer and netflow?

thank you

Here is the conf and the show ip cache flow

interface FastEthernet3/0

ip address 195.202.0.92 255.255.255.128

ip route-cache flow

speed 100

full-duplex

!

....

interface Group-Async1

ip unnumbered FastEthernet3/0

encapsulation ppp

no ip route-cache same-interface

ip route-cache flow

no ip mroute-cache

async mode interactive

peer default ip address pool dialin

ppp max-bad-auth 5

no ppp lcp fast-start

ppp authentication pap callin

group-range 33 62

....

interface Dialer1

ip unnumbered FastEthernet3/0

ip access-group 192 in

encapsulation ppp

no ip route-cache same-interface

ip route-cache flow

no ip mroute-cache

dialer in-band

dialer idle-timeout 1800

dialer-group 1

peer default ip address pool dialin

compress stac

no cdp enable

ppp authentication pap callin

....

ip flow-export version 5

ip flow-export destination 10.100.20.40 36401

sh ip cache flow

IP packet size distribution (13755099 total packets):

1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480

.000 .444 .024 .011 .011 .004 .003 .003 .003 .021 .007 .008 .009 .011 .009

512 544 576 1024 1536 2048 2560 3072 3584 4096 4608

.007 .010 .244 .016 .145 .000 .000 .000 .000 .000 .000

IP Flow Switching Cache, 278544 bytes

74 active, 4022 inactive, 885483 added

16741020 ager polls, 0 flow alloc failures

Active flows timeout in 30 minutes

Inactive flows timeout in 15 seconds

last clearing of statistics 5d01h

Protocol Total Flows Packets Bytes Packets Active(Sec) Idle(Sec)

-------- Flows /Sec /Flow /Pkt /Sec /Flow /Flow

TCP-Telnet 108 0.0 190 43 0.0 44.0 13.4

TCP-FTP 2936 0.0 33 67 0.2 17.3 10.8

TCP-FTPD 17276 0.0 12 367 0.4 1.8 2.8

TCP-WWW 16541 0.0 5 217 0.2 12.7 12.6

TCP-SMTP 8809 0.0 91 410 1.8 17.7 4.0

TCP-NNTP 180 0.0 50 372 0.0 10.1 9.8

TCP-Frag 15 0.0 2 28 0.0 2.4 15.5

TCP-other 654902 1.4 18 448 27.3 7.1 6.1

UDP-DNS 34721 0.0 1 69 0.1 0.6 15.4

UDP-NTP 6994 0.0 1 76 0.0 0.0 15.4

UDP-TFTP 1999 0.0 2 48 0.0 8.5 15.4

UDP-Frag 27 0.0 28 771 0.0 11.4 15.5

UDP-other 125108 0.2 3 214 0.9 5.9 15.4

ICMP 15831 0.0 5 298 0.1 23.7 15.3

Total: 885447 2.0 15 430 31.4 7.0 8.1

SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts

Fa3/0 195.202.0.15 Local 195.202.0.92 11 0715 066E 268

As61 195.202.0.58 Null 195.202.0.255 11 008A 008A 1

Fa3/0 195.202.0.3 Null 224.0.0.9 11 0208 0208 1

Se0/0:10 195.202.0.43 Fa3/0 161.69.201.237 06 4DE9 D2FE 1682

As47 195.202.0.46 Fa3/0 195.202.0.9 01 0000 0301 1

Fa3/0 195.202.0.93 Null 224.0.0.9 11 0208 0208 1

Fa3/0 195.202.0.95 Null 224.0.0.9 11 0208 0208 206

Fa3/0 195.202.0.95 As61 195.202.0.58 01 0000 030D 1

Fa3/0 161.69.201.237 Di1 195.202.0.43 06 D2FE 4DE9 1697

Se0/1:1 10.0.27.2 Fa3/0 195.202.0.9 11 0C3A 0C3A 67

Fa3/0 195.202.0.9 Null 10.0.27.2 11 0C3A 0C3A 67

As67 195.202.0.35 Null 193.252.19.3 11 0402 0035 1

Se0/0:22 10.0.132.93 Fa3/0 207.188.7.80 06 04AD 0050 2

Fa3/0 195.202.0.9 Di1 195.202.0.43 06 0C38 4E28 1

Fa3/0 195.202.0.9 Di1 195.202.0.43 06 0C38 4E2A 1

Fa3/0 195.202.0.9 Di1 195.202.0.43 06 0C38 4E2B 17

As49 195.202.0.81 Fa3/0 202.84.15.189 06 0442 0019 1

Fa3/0 10.10.10.4 Local 195.202.0.92 06 03FF 0202 11

Se0/0:10 195.202.0.43 Fa3/0 195.202.0.9 06 4E2B 0C38 11

Se0/0:10 195.202.0.43 Fa3/0 195.202.0.9 06 4E2A 0C38 6

Se0/0:10 195.202.0.43 Fa3/0 195.202.0.9 06 4E28 0C38 67

Se0/0:16 10.0.12.2 Fa3/0 195.202.0.9 11 0C3A 0C3A 9

Fa3/0 195.202.0.1 Local 195.202.0.92 01 0000 0501 34

Fa3/0 195.202.0.9 Null 10.0.12.2 11 0C3A 0C3A 9

As67 195.202.0.35 Fa3/0 195.202.0.99 11 0403 0035 1

Fa3/0 195.202.0.99 As67 195.202.0.35 11 0035 0403 1

Fa3/0 10.10.10.4 Local 195.202.0.92 06 03FE 03FE 1

Se0/1:1 10.0.27.2 Fa3/0 195.202.0.9 06 0D03 0C38 26

Fa3/0 195.202.0.9 Null 10.0.27.2 06 0C38 0D03 25

Se0/0:10 195.202.0.43 Fa3/0 161.69.201.238 06 4DF2 06A6 2724

Fa3/0 161.69.201.238 Di1 195.202.0.43 06 06A6 4DF2 4264

Fa3/0 195.202.0.99 Null 10.0.27.2 11 0035 0400 5

Se0/1:1 10.0.27.2 Fa3/0 195.202.0.2 11 0400 0035 1

Se0/1:1 10.0.27.2 Fa3/0 195.202.0.99 11 0400 0035 5

As67 195.202.0.35 Null 224.0.0.2 01 0000 0A00 3

Fa3/0 195.202.0.9 Null 10.0.12.2 06 0C38 04F3 3

Fa3/0 195.202.0.9 Null 10.0.12.2 06 0C38 04F1 16

Fa3/0 195.202.0.9 Null 10.0.12.2 06 0C38 04F4 3

Fa3/0 195.202.0.9 Null 10.0.12.2 06 0C38 04EF 33

Se0/0:16 10.0.12.2 Fa3/0 195.202.0.9 06 04F4 0C38 4

Se0/0:16 10.0.12.2 Fa3/0 195.202.0.9 06 04F3 0C38 4

Se0/0:16 10.0.12.2 Fa3/0 195.202.0.9 06 04F1 0C38 10

Se0/0:16 10.0.12.2 Fa3/0 195.202.0.9 06 04EF 0C38 22

Fa3/0 195.202.0.9 As41 195.202.0.54 06 0C38 0463 46

Fa3/0 195.202.0.9 As47 195.202.0.46 06 0C38 0475 46

Fa3/0 195.202.0.9 As47 195.202.0.46 06 0C38 0474 24

Fa3/0 195.202.0.9 As47 195.202.0.46 06 0C38 0477 4

Fa3/0 195.202.0.9 As47 195.202.0.46 06 0C38 0473 14

As41 195.202.0.54 Fa3/0 195.202.0.9 06 0463 0C38 85

As47 195.202.0.46 Fa3/0 195.202.0.9 06 0477 0C38 3

As47 195.202.0.46 Fa3/0 195.202.0.9 06 0474 0C38 6

As47 195.202.0.46 Fa3/0 195.202.0.9 06 0475 0C38 19

As47 195.202.0.46 Fa3/0 195.202.0.9 06 0473 0C38 5

Fa3/0 195.202.0.9 Di1 195.202.0.52 06 0C38 0486 39

Fa3/0 195.202.0.9 Null 195.202.0.52 06 0C38 0485 18

Fa3/0 195.202.0.9 Di1 195.202.0.52 06 0C38 0484 36

Fa3/0 195.202.0.9 Di1 195.202.0.52 06 0C38 0483 60

Fa3/0 195.202.0.9 As92 195.202.0.85 06 0C38 04A6 827

Se0/0:3 195.202.0.52 Fa3/0 195.202.0.9 06 0486 0C38 22

Se0/0:3 195.202.0.52 Fa3/0 195.202.0.9 06 0485 0C38 12

Se0/0:3 195.202.0.52 Fa3/0 195.202.0.9 06 0484 0C38 20

Se0/0:3 195.202.0.52 Fa3/0 195.202.0.9 06 0483 0C38 35

Fa3/0 195.202.0.9 As92 195.202.0.85 06 0C38 04AC 10

Fa3/0 195.202.0.9 As92 195.202.0.85 06 0C38 04AA 11

Fa3/0 195.202.0.9 As92 195.202.0.85 06 0C38 04AB 19

As92 195.202.0.85 Fa3/0 195.202.0.9 06 04AA 0C38 11

As92 195.202.0.85 Fa3/0 195.202.0.9 06 04AB 0C38 15

As92 195.202.0.85 Fa3/0 195.202.0.9 06 04AC 0C38 9

As92 195.202.0.85 Fa3/0 195.202.0.9 06 04A6 0C38 437

Se0/0:26 10.0.175.150 Fa3/0 207.188.7.80 06 04E7 0050 4

Fa3/0 195.202.0.9 Null 10.0.152.100 06 0C38 0433 2

Fa3/0 195.202.0.9 Null 10.0.152.100 06 0C38 0432 2

Se0/0:30 10.0.152.100 Fa3/0 195.202.0.9 06 0433 0C38 3

1 Reply 1

r-simpson
Level 3
Level 3

Might be a configuration issue. Look over this link at the configuration suggestions and try those. http://www.cisco.com/univercd/cc/td/doc/product/software/ios113ed/113ed_cr/switch_c/xcnetflo.htm#xtocid151807