On Thu, 19 Jan 2006 [EMAIL PROTECTED] wrote:
There is a command on Cisco box to make the ifIndex permanently, even with
reloads. I used the command once, but sorry, can not remember by head. You
may find it on Cisco doc searching for snmp commands.
Just for the record it's not something you can depend on working. The
last two versions I used on a 7206 gleefully ignored it and reindexed a
few thousand atm vcs for me. Wheee!
Charles
Cordially,
------------------------------------------------------------------
Alaerte Gladston Vidali
IBM Global Services - SO
Tel.55+11+2121-2879 Fax:55+11+2121-2449
"Jay A. Kreibich" <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED]
01/19/2006 01:59 PM
Please respond to
[EMAIL PROTECTED]
To
Jaime Nebrera <[EMAIL PROTECTED]>
cc
[email protected]
Subject
Re: [Flow-tools] Data from switches
On Thu, Jan 19, 2006 at 04:42:30PM +0100, Jaime Nebrera scratched on the
wall:
This will sound as an stupid question but we are used to software
netflow probes and not those included in some high end equipment.
We're actually using software probes on mirrored ports to monitor our
exit. Turns out that many of those "include in high end equipment"
collectors suck and produce very questionable data.
Currently, to distinguish each probe or port we use the IP of it, but
how do you do this when you have multiple ports monitored in the same
device (switch)? How does the collector distinguish them?
Each flow record includes an "source if-index" and "dest if-index".
Also, another stupid one, is snmp needed to be able to distinguish
them?
Sometimes. Some devices don't have a hard mapping between physical
slots/ports and ifindex values. This means if you add/remove cards
and/or configurations, you can cause the ifindex values to change.
You can use SNMP to re-map those "soft" ifindex to physical ports, if
you find them changing on you every time you re-boot the box.
-j
--
Jay A. Kreibich | CommTech, Emrg Net Tech Svcs
[EMAIL PROTECTED] | Campus IT & Edu Svcs
<http://www.uiuc.edu/~jak> | University of Illinois at U/C
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
