Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

Anonymous
N/A

Flexible Netflow options application-attribute template is not being exported

Hi,

I have configured a router to export flow data using both Flexible Netflow and ipfix.  The options application-attribute template is not being exported.  Verified that the template does exist:

bas-2911-vg03#show flow export JEENetFlow-to-OrionNBAR template
Flow Exporter JEENetFlow-to-OrionNBAR:
  Client: Option options application-name
  Exporter Format: IPFIX (Version 10)
  Template ID    : 256
  Source ID      : 0
  Record Size    : 83
  Template layout
  _____________________________________________________________________________
  |                 Field                   |    ID | Ent.ID | Offset |  Size |
  -----------------------------------------------------------------------------
  | APPLICATION ID                          |    95 |        |      0 |     4 |
  | application name                        |    96 |        |      4 |    24 |
  | application description                 |    94 |        |     28 |    55 |
  -----------------------------------------------------------------------------

  Client: Option options application-attributes
  Exporter Format: IPFIX (Version 10)
  Template ID    : 257
  Source ID      : 0
  Record Size    : 130
  Template layout
  _____________________________________________________________________________
  |                 Field                   |    ID | Ent.ID | Offset |  Size |
  -----------------------------------------------------------------------------
  | APPLICATION ID                          |    95 |        |      0 |     4 |
  | application category name               | 12232 |      9 |      4 |    32 |
  | application sub category name           | 12233 |      9 |     36 |    32 |
  | application group name                  | 12234 |      9 |     68 |    32 |
  | p2p technology                          |   288 |        |    100 |    10 |
  | tunnel technology                       |   289 |        |    110 |    10 |
  | encrypted technology                    |   290 |        |    120 |    10 |
  -----------------------------------------------------------------------------

  Client: Flow Monitor JEENetFlow-MonitorNBAR
  Exporter Format: IPFIX (Version 10)
  Template ID    : 258
  Source ID      : 0
  Record Size    : 34
  Template layout
  _____________________________________________________________________________
  |                 Field                   |    ID | Ent.ID | Offset |  Size |
  -----------------------------------------------------------------------------
  | ipv4 source address                     |     8 |        |      0 |     4 |
  | ipv4 destination address                |    12 |        |      4 |     4 |
  | interface input snmp                    |    10 |        |      8 |     4 |
  | transport source-port                   |     7 |        |     12 |     2 |
  | transport destination-port              |    11 |        |     14 |     2 |
  | ip tos                                  |     5 |        |     16 |     1 |
  | ip protocol                             |     4 |        |     17 |     1 |
  | counter bytes                           |     1 |        |     18 |     4 |
  | counter packets                         |     2 |        |     22 |     4 |
  | application id                          |    95 |        |     26 |     4 |
  | interface output snmp                   |    14 |        |     30 |     4 |
  -----------------------------------------------------------------------------

Flow and application name templates are being exported and the application-attributes has 0

Flow Exporter JEENetFlow-to-OrionNBAR:
  Packet send statistics (last cleared 02:18:39 ago):
    Successfully sent:         5256                  (1799959 bytes)

  Client send statistics:
    Client: Option options application-name
      Records added:           13483
        - sent:                13483
      Bytes added:             1119089
        - sent:                1119089

    Client: Option options application-attributes
      Records added:           0
      Bytes added:             0

    Client: Flow Monitor JEENetFlow-MonitorNBAR
      Records added:           12300
        - sent:                12300
      Bytes added:             418200
        - sent:                418200

Version:

bas-2911-vg03#show ver
Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.4(3)M7, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2017 by Cisco Systems, Inc.
Compiled Thu 02-Feb-17 21:48 by prod_rel_team

ROM: System Bootstrap, Version 15.0(1r)M15, RELEASE SOFTWARE (fc1)

bas-2911-vg03 uptime is 4 days, 11 hours, 2 minutes
System returned to ROM by reload at 09:16:49 UTC Thu Jul 27 2017
System image file is "flash0:c2900-universalk9-mz.SPA.154-3.M7.bin"
Last reload type: Normal Reload
Last reload reason: Reload Command

Flow configuration:

flow exporter JEENetFlow-to-OrionNBAR
 destination 10.199.25.30
 source GigabitEthernet0/2
 transport udp 4739
 export-protocol ipfix
 template data timeout 60
 option application-table timeout 60
 option application-attributes timeout 120
!
!
flow record JEENBARipv4
 match ipv4 tos
 match ipv4 protocol
 match ipv4 source address
 match ipv4 destination address
 match transport source-port
 match transport destination-port
 match interface input
 collect interface output
 collect counter bytes
 collect counter packets
 collect application name
!
!
flow monitor JEENetFlow-MonitorNBAR
 description Original Netflow captures
 exporter JEENetFlow-to-OrionNBAR
 cache timeout inactive 10
 cache timeout active 60
 record JEENBARipv4
!

  • Silicon Valley Cisco User Group (SVCUG)
5
Views
0
Helpful
0
Replies
This widget could not be displayed.