These are the stats for parital traffic that its exporting..
Tuco#
Tuco#show mls ip count
Displaying Netflow entries in Supervisor Earl
Number of shortcuts = 128144
Tuco#show ip cache flow
IP packet size distribution (3596003 total packets):
1-32 64 96 128 160 192 224 256 288 320 352 384 416 448
480
.001 .481 .095 .123 .103 .116 .050 .004 .001 .001 .002 .006 .003 .001
.000
512 544 576 1024 1536 2048 2560 3072 3584 4096 4608
.000 .000 .003 .000 .000 .000 .000 .000 .000 .000 .000
IP Flow Switching Cache, 4456704 bytes
26 active, 65510 inactive, 408315 added
10304066 ager polls, 0 flow alloc failures
Active flows timeout in 1 minutes
Inactive flows timeout in 15 seconds
last clearing of statistics never
Protocol Total Flows Packets Bytes Packets Active(Sec)
Idle(Sec)
-------- Flows /Sec /Flow /Pkt /Sec /Flow
/Flow
TCP-Telnet 388 0.0 104 43 0.0 8.4
6.9
TCP-WWW 393 0.0 1 444 0.0 0.0
14.2
TCP-SMTP 21 0.0 1 176 0.0 0.1
15.6
TCP-X 2 0.0 4 1177 0.0 0.0
15.5
TCP-BGP 7266 0.0 37 118 0.0 57.7
2.2
TCP-other 4502 0.0 5 107 0.0 0.4
4.5
UDP-DNS 42 0.0 1 75 0.0 3.3
15.4
UDP-NTP 47 0.0 18 76 0.0 0.0
15.5
UDP-other 280292 0.0 4 154 0.2 0.0
15.4
ICMP 24125 0.0 1 79 0.0 0.4
15.3
IGMP 81 0.0 1 345 0.0 0.0
15.5
GRE 1 0.0 3 236 0.0 0.1
15.1
IP-other 91129 0.0 21 68 0.4 35.7
8.3
Total: 408289 0.0 8 102 0.8 9.0
13.5
SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP
Pkts
Vl888 150.135.28.49 Null 239.255.255.253 11 C007 01AB
1
Vl888 128.196.195.9 Null 239.255.255.253 11 CBEC 01AB
1
Vl888 150.135.160.40 Null 229.55.150.208 11 0542 0541
1
Vl888 150.135.157.81 Null 229.55.150.208 11 0542 0541
1
Vl888 128.196.250.90 Null 239.255.255.253 11 CBD8 01AB
1
Vl888 172.17.1.190 Gi3/4 192.80.43.238 67 0000 0000
15
Vl888 172.17.1.198 Gi3/4 192.80.43.238 67 0000 0000
49
Vl888 172.17.0.53 Gi3/4 192.80.43.238 67 0000 0000
38
Vl888 172.17.0.61 Gi3/4 192.80.43.238 67 0000 0000
1
Vl888 128.196.24.166 Null 224.0.0.10 58 0000 0000
1
Vl888 128.196.24.165 Null 224.0.0.10 58 0000 0000
1
Vl888 128.196.24.168 Null 224.0.0.10 58 0000 0000
10
Vl888 172.16.128.46 Local 192.80.43.244 06 9DE6 0017
186
Vl888 150.135.93.20 Null 239.255.255.253 11 DA4C 01AB
1
Vl888 150.135.48.75 Null 229.55.150.208 11 0542 0541
1
Vl888 128.196.169.162 Null 239.255.255.253 11 C00A 01AB
1
Vl888 128.196.128.12 Local 192.80.43.244 06 3466 0017
143
Vl888 140.252.1.251 Gi3/4 192.80.43.238 67 0000 0000
1
Vl888 192.80.43.250 Local 192.80.43.244 06 2B33 00B3
25
Vl888 128.196.128.46 Local 192.80.43.244 11 CB4E 00A1
1
Vl888 128.196.128.12 Local 192.80.43.244 11 3469 DC67
4
Vl888 150.135.250.18 Gi3/4 192.80.43.238 67 0000 0000
3
Vl888 150.135.250.14 Gi3/4 192.80.43.238 67 0000 0000
39
Tuco#
Tuco#
On Mon, 20 Feb 2006, Prakash RudraRaju wrote:
Hi guys,
I am not able to capture all the traffic on a 6509 Router. It runs the
followign software..
IOS (tm) c6sup2_rp Software (c6sup2_rp-PK2SV-M), Version 12.1(23)E4, RELEASE
SOFTWARE (fc1)
The configuration changes that I made are..
(all ip address are changed for security reasons)
# Global commands in configuration mode
ip flow-export source Loopback 0
ip flow-export version 5 peer-as
ip flow-export destination xxx.xxx.xxx.xxx 9065
ip flow-cache timeout active 1
# Configuration change on each interface
ip route-cache flow
following are the interefaces that I want to capture traffic.
Current configuration : 163 bytes
!
interface FastEthernet9/46
description Public Side VPN-NET
ip address xxx.xxx.xxx.xxx 255.255.255.248
ip access-group vpn-public out
ip route-cache flow
end
!
interface GigabitEthernet1/2
logging event link-status
load-interval 30
switchport
switchport access vlan 888
end
!
interface Vlan888
description Firewall Outside
ip address xxx.xxx.xxx.xxx 255.255.255.240
no ip redirects
no ip unreachables
no ip proxy-arp
ip pim sparse-mode
ip route-cache flow
logging event link-status
load-interval 30
end
Please let me know if you guys need any additional information. Any pointers
towards a solution will also be greatly appreciated.
Thanks,
Prakash.
--
Prakash Rudraraju Systems Programmer
520 626-1225 (W) CCIT - NTS
520 307-0949 (C) University of Arizona
T h i s t a g l i n e h a s b e e n u n z i p p e d .
-------------------------------------
Printed using 100% recycled electrons
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
