3 Replies Latest reply on Oct 13, 2011 9:06 AM by SteveSW

    RTNFA Multiple interfaces to capture?

    dimsim001

      Hi, have just setup netflow on an 857 running 12.4(15)T9 and am confused with the number of interfaces im able to capture. I've enabling net flow individually on both the dialer and the internal vlan1 interfaces and both show two interfaces (Interface 12 & 16 in this instance) to capture from in RTNFA.

      Config below

      ip flow-export source Vlan1
      ip flow-export version 5
      ip flow-export destination 192.168.xxx.xxx 2055

      interface Vlan1
       ip address 192.168.xxx.xxx 255.255.255.0
       ip access-group xxx in
       ip flow ingress
       ip flow egress
       ip nat inside
       ip virtual-reassembly
       ip route-cache flow

      When capturing one interface appear to show outgoing and the other incoming but i cant view a capture of both together? Is this simply a limitation of the free tool?

        • Re: RTNFA Multiple interfaces to capture?
          SteveSW

          dimsim001,

          You should be able to choose an end point and see all traffic to or from that end point. You would not be able to do that for two separate endpoints at the same time.

          --

          Steve

            • Re: RTNFA Multiple interfaces to capture?
              dimsim001


              dimsim001,

              You should be able to choose an end point and see all traffic to or from that end point. You would not be able to do that for two separate endpoints at the same time.

              --

              Steve

               

               



               

               

              well i have a problem then as when i choose an endpoint i only see either inbound or outbound traffic depending on which interface i originally selected to capture.

              if i capture <IP ADDRESS>, Interface 12 I see inbound traffic. If i capture from <IPADDRESS> Interface 16 I see outbound traffic.