[Cflowd] RE: flow from GSR12000
Lim, Jason
jason.lim@reach.com
Tue, 21 May 2002 15:35:26 +0800
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
--------------InterScan_NT_MIME_Boundary
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_01C2009A.0D6CE880"
------_=_NextPart_001_01C2009A.0D6CE880
Content-Type: text/plain;
charset="iso-8859-1"
Hi,
I have been trying to capture and display the flow records from a GSR. I am
able to display the information on the ATM interface but not the gigabit
ethernet ports. I am getting a lot of data on the arts file(from cflowd), it
seems like I am collecting all the data, but when I execute "artsnets", I am
just able to see the ATM records . Here's the configuration:
GSR1#sh ip flow sampling
Flow sampling is enabled
'Packet Interval' sampling mode is configured.
1 out of every 1000 packets is being sampled.
GSR1#sh ip flow export
Flow export is enabled
Exporting flows to 10.1.1.2 (2055)
Exporting using source interface Loopback0
Version 5 flow records, origin-as
3539626574 flows exported in 118132066 udp datagrams
0 flows failed due to lack of export packet
0 export packets were sent up to process level
0 export packets were punted to the RP
557 export packets were dropped due to no fib
0 export packets were dropped due to adjacency issues
0 export packets were dropped due to fragmentation failures
0 export packets were dropped due to encapsulation fixup failures
0 export packets were dropped enqueuing for the RP
109 export packets were dropped due to IPC rate limiting
0 export packets were dropped due to output drops
interface GigabitEthernet1/0
:
ip route-cache flow
ip flow-export version 5 origin-as
ip flow-export destination 10.1.1.2 2055
ip flow-sampling-mode packet-interval 1000
Any advise is greatly appreciated.
Thanks,
regards,
Jason
------_=_NextPart_001_01C2009A.0D6CE880
Content-Type: text/html;
charset="iso-8859-1"
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2600.0" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=740145106-21052002><FONT face=Arial><FONT color=#0000ff><FONT
size=2><SPAN
class=710503007-21052002>H</SPAN>i,</FONT></FONT></FONT></SPAN></DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=740145106-21052002></SPAN></FONT></FONT></FONT> </DIV>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=740145106-21052002>I have been trying to capture and display the
flow records from a GSR. I am able to display the information on the
ATM interface but not the gigabit ethernet
ports. I am getting a lot of data on the arts file(from
cflowd), it seems like I am collecting all the data, but when I execute
"artsnets", I am just able to see the ATM records . Here's the
configuration:</SPAN></FONT></FONT></FONT></DIV>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=740145106-21052002></SPAN></FONT></FONT></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2>GSR1#sh ip flow sampling <BR>Flow
sampling is enabled<BR> 'Packet Interval' sampling mode is
configured.<BR> 1 out of every 1000 packets is being sampled.<BR>GSR1#sh
ip flow export <BR>Flow export is enabled<BR> Exporting
flows to<SPAN class=740145106-21052002> </SPAN><SPAN
class=740145106-21052002>10.1.1.2 </SPAN> (2055)<BR> Exporting
using source interface Loopback0<BR> Version 5 flow records,
origin-as<BR> 3539626574 flows exported in 118132066 udp
datagrams<BR> 0 flows failed due to lack of export packet<BR> 0
export packets were sent up to process level<BR> 0 export packets were
punted to the RP<BR> 557 export packets were dropped due to no
fib<BR> 0 export packets were dropped due to adjacency issues<BR>
0 export packets were dropped due to fragmentation failures<BR> 0 export
packets were dropped due to encapsulation fixup failures<BR> 0 export
packets were dropped enqueuing for the RP<BR> 109 export packets were
dropped due to IPC rate limiting<BR> 0 export packets were dropped due
to output drops</FONT><BR><BR><SPAN class=740145106-21052002><FONT face=Arial
color=#0000ff size=2>interface GigabitEthernet1/0<BR> :<BR> ip
route-cache flow</FONT></SPAN></DIV>
<DIV><SPAN class=740145106-21052002><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=740145106-21052002><FONT face=Arial color=#0000ff size=2>ip
flow-export version 5 origin-as<BR>ip flow-export destination 10.1.1.2
2055<BR>ip flow-sampling-mode packet-interval 1000</FONT></SPAN></DIV>
<DIV><SPAN class=740145106-21052002><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=740145106-21052002><FONT face=Arial color=#0000ff size=2>Any
advise is greatly appreciated.</FONT></SPAN></DIV>
<DIV><SPAN class=740145106-21052002><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=740145106-21052002><FONT face=Arial color=#0000ff
size=2>Thanks,</FONT></SPAN></DIV>
<DIV><SPAN class=740145106-21052002><FONT face=Arial color=#0000ff
size=2>regards,</FONT></SPAN></DIV>
<DIV><SPAN class=740145106-21052002><FONT face=Arial color=#0000ff
size=2>Jason</FONT></SPAN></DIV></BLOCKQUOTE></BODY></HTML>
------_=_NextPart_001_01C2009A.0D6CE880--
--------------InterScan_NT_MIME_Boundary--