Hi,
Did you try to reboot the router ? We have had similar problem. In our
case after upgrade we were getting data initially but in time (in about
3-4 days) amount of gathered data became very low and did not reflect
actual traffic. If I tried to get any info by "show mls netflow ..."
command I was getting a response in about 3- mins only with some error
code (I don't remember which), in the log there was an error message like:
Sep 29 09:47:00: %IPC-SP-5-WATERMARK: 803 messages pending in rcv for
the port Card5/0:Request(10000.5) seat 10000
Except these problems with netflow export everything else seems to me
worked correctly. We had this problem investigated by Cisco engineers.
They did not find a potential cause, and we were ready to go with
downgrade of IOS in the previous release which worked for us a long time
w/o any issues. However, after rebooting of the router problem went
away and since that time it runs just fine.
- Andrey.
Mike Hunter wrote:
On Dec 15, "Ben Beuchler" wrote:
Have you searched the bug db on CCO to see if there's any known Netflow
bugs? Perhaps the router is spitting out something just "off" enough that
flow-tools doesn't see it as valid... Just a thought. They come up with
some good bugs over there in IOS-land. :)
I hadn't thought of that, so I just checked. There's only one
outstanding netflow-related bug on my IOS version, and it has to do
with it occasionally miscounting the number of exported flows.
Nothing that indicates its sending out bad packets...
The last thing I can think of is to set up an alternative netflow
collection program and see if it can capture the flows, so that you'll
know if the flows you're getting are somewhat passable or not.
Check out this page for a list of other programs:
http://net.doit.wisc.edu/~plonka/Cflow/
Maybe even ntop.
I just re-read the subject of your message...so, all the trouble started
with an IOS upgrade? That sucks!
Mike
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
