Thanks!! i tried that "collect timestamp sys-uptime first" and "last" but didn't work,
Now i am trying to enable "NetFlow Version 5" but i am seeing following in monitor, does v5 supported on ASR1006? Flow Exporter: netflow-exporter (inactive) R1#show flow monitor netflow-monitor Flow Monitor netflow-monitor: Description: User defined Flow Record: netflow-record Flow Exporter: netflow-exporter (inactive) Cache: Type: normal (Platform cache) Status: allocated Size: 200000 entries Inactive Timeout: 15 secs Active Timeout: 60 secs Trans end aging: off On Sun, Jul 3, 2016 at 7:16 PM, Peter Rathlev <pe...@rathlev.dk> wrote: > On Fri, 2016-07-01 at 12:39 -0400, Satish Patel wrote: >> I have following network configured on Cisco ASR1000 but i am seeing >> wrong date on nfsen, does anyone experience this issue? >> >> Should i use ipfix or Netflow v9 ? I did capture wireshark and its >> showing correct date and time. >> >> flow record netflow-record >> match ipv4 destination address >> match ipv4 source address >> match transport destination-port >> match transport source-port >> match ipv4 protocol >> collect counter bytes >> collect counter packets > > I'm not familiar with ASR1000 but on C6k you need to add timestamp > collection. This is our template for IPv4: > > flow record IPV4-FULL > match ipv4 tos > match ipv4 protocol > match ipv4 source address > match ipv4 destination address > match transport source-port > match transport destination-port > collect transport tcp flags > collect interface input > collect counter bytes long > collect counter packets long > collect timestamp sys-uptime first <--- > collect timestamp sys-uptime last <--- > ! > > -- > Peter > _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/