Depending on your release you may get different information in the NetFlow cache related to multicast with the Cat6k. In some releases you may only see non-rpf flows and in other releases rpf related flows but they will not export.
Multicast NetFlow is not officially supported until 12.2(18)SXF so your results may vary. > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:flow-tools- > [EMAIL PROTECTED] On Behalf Of Gilroy, Lloyd (GTI) > Sent: Friday, May 12, 2006 7:12 AM > To: [email protected] > Subject: [Flow-tools] Question on multicast V5 > > I have been trying to figure out how much multicast traffic and if the > traffic is valid being reported via V5 on the cisco 6500 platform. > Whenever I ask cisco they say go to V9, which sounds good except I would > have to upgrade all my routers to a new level of IOS which is not going > to happen. I also have been playing around with the command below "ip > multicast netflow egress" command which is not documented much.. > > My config for the 6500 is below: > > 6500: > mls aging long 64 > mls aging normal 60 > mls flow ip interface-full > mls nde sender version 5 > ip flow-export source Loopback0 > ip flow-export version 5 origin-as > ip flow-export destination x.x.x.x nnn > > interface x/x > ip route-cache flow > ip multicast netflow egress > > Excerpt: The "ip multicast netflow egress" command causes the router to > generate flow records with the outbound ifIndex set for multicast > traffic. (In addition to the traditional flow record with next hop set > to Null, multiple flow records are created, one for each outbound > interface which is forwarding the particular multicast stream.) This > feature allows Out Approximation to work accurately for multicast > traffic. With this command you can detect multicast storms, isolate them > to specific branches, and identify the source server IP for remediation. > > Without the command I do see some multicast traffic (S,Gs) and the > output interface gets tagged as 0 in flow-tools. > > I have only been able to run that command in the lab and I am using IXIA > to generate multicast streams but the output has not been great, and I > am not 100% sure wether its the command or my IXIA config. Has anyone > had any luck with using this command or something similar to report > multicast traffic. > > Thanks, > ~Lloyd > -------------------------------------------------------- > > If you are not an intended recipient of this e-mail, please notify the > sender, delete it and do not read, act upon, print, disclose, copy, retain > or redistribute it. Click here for important additional terms relating to > this e-mail. http://www.ml.com/email_terms/ > -------------------------------------------------------- > _______________________________________________ > Flow-tools mailing list > [EMAIL PROTECTED] > http://mailman.splintered.net/mailman/listinfo/flow-tools _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
