[flow-tools] Incorrect octets ?

Heiko Brey cico@pin-net.de
Fri, 3 May 2002 20:20:49 +0200 (MEST)


> Are you using a Cisco Catalyst platform?  Have you enabled NetFlow exports
> from both the Supervisor and RSM/MSFC?

We are using a Cisco Catalyst 5513 with a NFFC II Engine and enabled
NetFlow exports on both!

Could it be the problem that the switch caches some information without
letting the RSM know about the packets (just switches the packet with the
information inside its cache)?

Our thoughts are based on this:

We could only account packets if the RSM is used to make a routing
decicion and the packet crosses a vlan border - correct?

Thank you!

Heiko

> On Thu, May 02, 2002 at 04:36:51PM +0200, Heiko Brey wrote:
> > 
> > Hi all,
> > 
> > I got a little problem!
> > 
> > If I do something like this
> > 
> > flow-cat ft-v05.* | flow-print -f 5 
> > 
> > and sum the octets and packets together I get a value that seems to be
> > divided by 100 to the really transfered amount of data!
> > 
> > E.G.
> > 
> > I transfer a file exactly 1024 MB and get a value thats around 130 MB (30
> > persent headers and corrupt packets I thought).
> > 
> > Did anyone have the same problem? I really don't know what this could
> > be! All vlans are correct and there should be the correct value for the
> > octets but it isn't!
> > 
> > Any help would be quite nice!
> > 
> > Thank you!
> > 
> > Regards,
> > 
> > Heiko
> > 
> > 
> > _______________________________________________
> > flow-tools@splintered.net
> > http://www.splintered.net/sw/flow-tools
>