I have been trying to figure out how much multicast traffic and if the traffic is valid being reported via V5 on the cisco 6500 platform. Whenever I ask cisco they say go to V9, which sounds good except I would have to upgrade all my routers to a new level of IOS which is not going to happen. I also have been playing around with the command below "ip multicast netflow egress" command which is not documented much..
My config for the 6500 is below: 6500: mls aging long 64 mls aging normal 60 mls flow ip interface-full mls nde sender version 5 ip flow-export source Loopback0 ip flow-export version 5 origin-as ip flow-export destination x.x.x.x nnn interface x/x ip route-cache flow ip multicast netflow egress Excerpt: The "ip multicast netflow egress" command causes the router to generate flow records with the outbound ifIndex set for multicast traffic. (In addition to the traditional flow record with next hop set to Null, multiple flow records are created, one for each outbound interface which is forwarding the particular multicast stream.) This feature allows Out Approximation to work accurately for multicast traffic. With this command you can detect multicast storms, isolate them to specific branches, and identify the source server IP for remediation. Without the command I do see some multicast traffic (S,Gs) and the output interface gets tagged as 0 in flow-tools. I have only been able to run that command in the lab and I am using IXIA to generate multicast streams but the output has not been great, and I am not 100% sure wether its the command or my IXIA config. Has anyone had any luck with using this command or something similar to report multicast traffic. Thanks, ~Lloyd -------------------------------------------------------- If you are not an intended recipient of this e-mail, please notify the sender, delete it and do not read, act upon, print, disclose, copy, retain or redistribute it. Click here for important additional terms relating to this e-mail. http://www.ml.com/email_terms/ -------------------------------------------------------- _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
