Nevermind, my bad following command works :) Thank you so much! R1#show flow monitor netflow-monitor cache sort highest counter packets top 2 Processed 77 flows Aggregated to 2 flows Showing the top 2 flows
IPV4 SRC ADDR IPV4 DST ADDR TRNS SRC PORT TRNS DST PORT IP PROT bytes pkts time first time last =============== =============== ============= ============= ======= ========== ========== ============ ============ 162.210.198.75 xx.xx.xx.xx 57932 53413 17 34563 123 21:40:07.514 21:40:07.518 162.210.194.100 xx.xx.xx.xx 54942 53413 17 34563 123 21:40:09.722 21:40:09.726 On Wed, Jul 6, 2016 at 9:38 PM, Satish Patel <satish....@gmail.com> wrote: > I don't have (sh top talker ) command, We have ASR1006 > > R1#show top? > topology > > R1#sh version > Cisco IOS XE Software, Version 03.16.03.S - Extended Support Release > Cisco IOS Software, ASR1000 Software > (X86_64_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.5(3)S3, RELEASE SOFTWARE > (fc1) > Technical Support: http://www.cisco.com/techsupport > Copyright (c) 1986-2016 by Cisco Systems, Inc. > Compiled Thu 09-Jun-16 23:40 by mcpre > .. > ROM: IOS-XE ROMMON > .. > System image file is "bootflash: > asr1000rp2-adventerprisek9.03.16.03.S.155-3.S3-ext.bi" > > > > On Wed, Jul 6, 2016 at 7:31 PM, CiscoNSP List <cisconsp_l...@hotmail.com> > wrote: > >> >> Havent followed the entire thread, but you are using FNF correct? sh ip >> cache flow is for the "old style" (ip flow ingress) >> >> with FNF, there's a lot more flexibility to viewing flows....i.e. sh top >> talker sorted - show flow monitor <FNF Monitor name> cache sort highest >> counter packets top 20 >> >> >> >> ------------------------------ >> *From:* cisco-nsp <cisco-nsp-boun...@puck.nether.net> on behalf of >> Satish Patel <satish....@gmail.com> >> *Sent:* Thursday, 7 July 2016 6:29 AM >> *To:* Tom Hill >> *Cc:* Cisco Network Service Providers >> *Subject:* Re: [c-nsp] Netflow with nfsen issue >> >> Following command output is empty is that normal? Do you think that is >> because of Hardware base netflow, i meant its using CEF? >> >> R1#show ip cache flow >> >> >> On Wed, Jul 6, 2016 at 3:05 PM, Tom Hill <t...@ninjabadger.net> wrote: >> > On 05/07/16 22:13, Satish Patel wrote: >> >> I found solution to fix timestamp: >> >> >> >> I have added following to as per Peter said. >> >> >> >> collect timestamp sys-uptime first >> >> collect timestamp sys-uptime last >> >> >> >> and change export fron ipfix to v9 >> >> >> >> Now i can see correct timestamp on Nfsen :) >> > >> > Thanks for posting your solution, Satish. :) >> > >> > -- >> > Tom >> > _______________________________________________ >> > cisco-nsp mailing list cisco-nsp@puck.nether.net >> > https://puck.nether.net/mailman/listinfo/cisco-nsp >> cisco-nsp Info Page - puck.nether.net >> <https://puck.nether.net/mailman/listinfo/cisco-nsp> >> puck.nether.net >> To see the collection of prior postings to the list, visit the cisco-nsp >> Archives. Using cisco-nsp: To post a message to all the list members, send >> ... >> >> >> > archive at http://puck.nether.net/pipermail/cisco-nsp/ >> _______________________________________________ >> cisco-nsp mailing list cisco-nsp@puck.nether.net >> https://puck.nether.net/mailman/listinfo/cisco-nsp >> archive at http://puck.nether.net/pipermail/cisco-nsp/ >> > > _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/