There is a command on Cisco box to make the ifIndex permanently, even with reloads. I used the command once, but sorry, can not remember by head. You may find it on Cisco doc searching for snmp commands.
Cordially,
------------------------------------------------------------------
Alaerte Gladston Vidali
IBM Global Services - SO
Tel.55+11+2121-2879 Fax:55+11+2121-2449
| "Jay A. Kreibich"
<[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED] 01/19/2006 01:59 PM
|
|
On Thu, Jan 19, 2006 at 04:42:30PM +0100, Jaime Nebrera scratched on the wall:
> This will sound as an stupid question but we are used to software
> netflow probes and not those included in some high end equipment.
We're actually using software probes on mirrored ports to monitor our
exit. Turns out that many of those "include in high end equipment"
collectors suck and produce very questionable data.
> Currently, to distinguish each probe or port we use the IP of it, but
> how do you do this when you have multiple ports monitored in the same
> device (switch)? How does the collector distinguish them?
Each flow record includes an "source if-index" and "dest if-index".
> Also, another stupid one, is snmp needed to be able to distinguish
> them?
Sometimes. Some devices don't have a hard mapping between physical
slots/ports and ifindex values. This means if you add/remove cards
and/or configurations, you can cause the ifindex values to change.
You can use SNMP to re-map those "soft" ifindex to physical ports, if
you find them changing on you every time you re-boot the box.
-j
--
Jay A. Kreibich | CommTech, Emrg Net Tech Svcs
[EMAIL PROTECTED] | Campus IT & Edu Svcs
<http://www.uiuc.edu/~jak> | University of Illinois at U/C
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
_______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
