On Fri, 2016-07-01 at 12:39 -0400, Satish Patel wrote: > I have following network configured on Cisco ASR1000 but i am seeing > wrong date on nfsen, does anyone experience this issue? > > Should i use ipfix or Netflow v9 ? I did capture wireshark and its > showing correct date and time. > > flow record netflow-record > match ipv4 destination address > match ipv4 source address > match transport destination-port > match transport source-port > match ipv4 protocol > collect counter bytes > collect counter packets
I'm not familiar with ASR1000 but on C6k you need to add timestamp collection. This is our template for IPv4: flow record IPV4-FULL match ipv4 tos match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port collect transport tcp flags collect interface input collect counter bytes long collect counter packets long collect timestamp sys-uptime first <--- collect timestamp sys-uptime last <--- ! -- Peter _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/