Hey Jon, I did what you said this morning and set this up as follows:
mls netflow mls flow ip full mls nde sender version 5 ip flow-export source Vlan20 ip flow-export destination 172.20.200.51 XXXX interface Vlan110 ip route-cache flow ! interface Vlan200 ip route-cache flow When I went to the server that has the software for Flow it has a source of 172.20.142.3 (which I am not sure what that is, but that is just the source so it should be OK.) There is no incoming traffic (is that the way it should be?) And the outgoing traffic is 4235 flows per minute and collecting data which is cool :P So right now I just see outgoing traffic and none incoming, but should I be monitoring both? Also as far as monitoring the VLANS, should I monitor between VLAN14 (firewall) and VLAN200 or keep it between VLAN110 and VLAN200? Thanks everyone appreciate the help, we are getting their. -----Original Message----- From: Jonathan Lassoff [mailto:[email protected]] Sent: Monday, March 08, 2010 4:38 PM To: Travis Formoso Subject: RE: [Flow-tools] Setting up NetFlow on 6509 Excerpts from Travis Formoso's message of Mon Mar 08 12:57:21 -0800 2010: > The address of the analyzer machine is 172.20.200.51 on VLAN 20, so > how would that affect the commands below? ip flow-export source Vlan20 ip flow-export destination 172.20.200.51 XXXX > I tried the ip flow ingress layer2-switched vlan command but it does > not recognize it, could be the ios version. The version and PFC / MSFC versions will matter as well. If you have access, the Cisco docs explain this far more succinctly than I can. --j _______________________________________________ Flow-tools mailing list [email protected] http://mailman.splintered.net/mailman/listinfo/flow-tools
