3 Replies Latest reply on Apr 20, 2011 3:19 PM by routerspecialist

    Netflow on older 6500 Sup 2, PFC 2

    routerspecialist

      So, it's not working.  I admit, these are older 6500's.  The  IOS is:  Version 12.1(27b)E4. 

      Here's the problem:  I don't see any detail in the netflow pages on this device other than interface stats, no ports, protocols, etc. in Orion's netflow analyzer.  None of the good stuff that I get from other 6500s with Sup 720s.  Is it possible that the Sup2, PFC2, can't do netflow?

      I have my config below (the global part which relates to netflow).  And on the interfaces, trust me, I do ip route-cache flow configured.

      Any ideas out there????

       

      The config:

      ip flow-export version 5
      ip flow-export destination 10.x.x.x 2055

      mls flow ip destination
      mls nde sender

      And some show commands:

      DIST#sh mls nde
       Netflow Data Export enabled
       Exporting flows to 10.X.X.X (2055)
       Exporting flows from 10.X.X.X (52025)
       Version: 7
       Include Filter not configured
       Exclude Filter not configured
       Total Netflow Data Export Packets are:
          691 packets, 0 no packets, 19494 records
       Total Netflow Data Export Send Errors:
              IPWRITE_NO_FIB = 0
              IPWRITE_ADJ_FAILED = 0
              IPWRITE_PROCESS = 0
              IPWRITE_ENQUEUE_FAILED = 0
              IPWRITE_IPC_FAILED = 0
              IPWRITE_MTU_FAILED = 0
              IPWRITE_ENCAPFIX_FAILED = 0
      DIST#sh ip flow exp
      Flow export is enabled
        Exporting flows to 10.X.X.X (2055)
        Exporting using source IP address 10.X.X.X
        Version 5 flow records
        128685155 flows exported in 5561915 udp datagrams
        0 flows failed due to lack of export packet
        0 export packets were sent up to process level
        0 export packets were dropped due to no fib
        0 export packets were dropped due to adjacency issues
        0 export packets were dropped due to fragmentation failures
        0 export packets were dropped due to encapsulation fixup failures
        0 export packets were dropped enqueuing for the RP
        0 export packets were dropped due to IPC rate limiting

        • Re: Netflow on older 6500 Sup 2, PFC 2
          mavturner

          Is there a reason you are using version 7? Can you change that to v5 or v9? Most customers run those versions and I want to make sure there isn't some issues with the old IOS and v7 that we aren't aware of. In general, we will consume flows that contain the fields in this KB.

          http://knowledgebase.solarwinds.com/kb/questions/802/Required+flow+template+fields

           

          Can you run a wireshark capture and post some of the data here? You can use the display filter cflow to show the packet flows. Just expand the data portion (white out information you don't want everyone to see) and grab a screen capture.

           

          Mav

            • Re: Netflow on older 6500 Sup 2, PFC 2
              routerspecialist

              So, I changed these to version 5, no difference.  Still not showing up in NTA.  A packet capture will take some time.

              DIST#sh mls nde
               Netflow Data Export enabled
               Exporting flows to X.X.X.244 (2055)
               Exporting flows from X.X.X.18 (52025)
               Version: 5
               Include Filter not configured
               Exclude Filter not configured
               Total Netflow Data Export Packets are:
                  26148 packets, 0 no packets, 684868 records
               Total Netflow Data Export Send Errors:
                      IPWRITE_NO_FIB = 0
                      IPWRITE_ADJ_FAILED = 0
                      IPWRITE_PROCESS = 0
                      IPWRITE_ENQUEUE_FAILED = 0
                      IPWRITE_IPC_FAILED = 0
                      IPWRITE_MTU_FAILED = 0
                      IPWRITE_ENCAPFIX_FAILED = 0
              DIST#sh ip flow exp
              Flow export is enabled
                Exporting flows to x.X.X.244 (2055)
                Exporting using source IP address X.X.X.18
                Version 5 flow records
                129135268 flows exported in 5584052 udp datagrams
                0 flows failed due to lack of export packet
                0 export packets were sent up to process level
                0 export packets were dropped due to no fib
                0 export packets were dropped due to adjacency issues
                0 export packets were dropped due to fragmentation failures
                0 export packets were dropped due to encapsulation fixup failures
                0 export packets were dropped enqueuing for the RP
                0 export packets were dropped due to IPC rate limiting