I though I resolved my netflow problems, but they are back again. 6509 w/ Sup2 MSFC2 PFC2 IOS 12.2(18)SXD7b
Most of my interfaces are customer handoffs, so I add:
ip route-cache flow
to the interfaces, as well as having:
mls flow ip interface-full mls nde sender version 5
Things works fine. The interfaces are configured like this:
interface FastEthernet 7/15 ip address 1.1.1.1 255.255.255.0 ip route-cache flow
The port is given to customer, and they use the ip address as their default gateway.
The problem is when I do a customer interface like this:
interface FastEthernet 7/16 ip address 1.1.1.1 255.255.255.252 ip route-cache flow
ip route 1.1.2.0 255.255.255.0 1.1.1.2 250
In this case the customer takes the handoff and puts it into their own router, so the /24 is behind the router, and the /30 on the interface is used to connect the router.
In this setup, netflow data doesn't jive. The customer I did this for is pulling 3Mbps according to MRTG on Fe7/16 - yet the Netflow reports are only showing a couple kbps. Even my global netflow stats don't account for it.
Any ideas? Lately I've been weary of netflow. The reports dont seem to match MRTG, and in some cases is really off (like MRTG reporting
8Mbps, Netflow reporting 3Mbps).
I've been thinking about using RTG to poll and store SNMP stats for my
95th reporting instead of netflow and flow-tools.
Thanks John