more netflow problems

I though I resolved my netflow problems, but they are back again. 6509 w/ Sup2 MSFC2 PFC2 IOS 12.2(18)SXD7b

Most of my interfaces are customer handoffs, so I add:

ip route-cache flow

to the interfaces, as well as having:

mls flow ip interface-full mls nde sender version 5

Things works fine. The interfaces are configured like this:

interface FastEthernet 7/15 ip address 1.1.1.1 255.255.255.0 ip route-cache flow

The port is given to customer, and they use the ip address as their default gateway.

The problem is when I do a customer interface like this:

interface FastEthernet 7/16 ip address 1.1.1.1 255.255.255.252 ip route-cache flow

ip route 1.1.2.0 255.255.255.0 1.1.1.2 250

In this case the customer takes the handoff and puts it into their own router, so the /24 is behind the router, and the /30 on the interface is used to connect the router.

In this setup, netflow data doesn't jive. The customer I did this for is pulling 3Mbps according to MRTG on Fe7/16 - yet the Netflow reports are only showing a couple kbps. Even my global netflow stats don't account for it.

Any ideas? Lately I've been weary of netflow. The reports dont seem to match MRTG, and in some cases is really off (like MRTG reporting

8Mbps, Netflow reporting 3Mbps).

I've been thinking about using RTG to poll and store SNMP stats for my

95th reporting instead of netflow and flow-tools.

Thanks John

read more and respond »

Posted 5 years ago by essenz in Cisco Systems

Report misuse

Image for more netflow problems