[flow-tools] Incorrect octets ?

[Mark Fullmer]

The way it's supposed to work is the first packet in a flow is switched
by the RSM and the remaining packets in the flow are switched by the NFFC II.

This configuration will export flows properly if MLS is not enabled.  It
_should_ work with MLS if you can get the right software in the supervisor
and RSM.  I remember there being bugs in the NFFC accounting feature when
Cisco originally released it, but I've never run a 55XX configuration with
MLS enabled.

You might want to try just exporting flows from the supervisor and making
sure it works at all with the software rev you're running.

On Fri, May 03, 2002 at 08:20:49PM +0200, Heiko Brey wrote:
> 
> > Are you using a Cisco Catalyst platform?  Have you enabled NetFlow exports
> > from both the Supervisor and RSM/MSFC?
> 
> We are using a Cisco Catalyst 5513 with a NFFC II Engine and enabled
> NetFlow exports on both!
> 
> Could it be the problem that the switch caches some information without
> letting the RSM know about the packets (just switches the packet with the
> information inside its cache)?
> 
> Our thoughts are based on this:
> 
> We could only account packets if the RSM is used to make a routing
> decicion and the packet crosses a vlan border - correct?
> 
> Thank you!
> 
> Heiko
> 
> > On Thu, May 02, 2002 at 04:36:51PM +0200, Heiko Brey wrote:
> > > 
> > > Hi all,
> > > 
> > > I got a little problem!
> > > 
> > > If I do something like this
> > > 
> > > flow-cat ft-v05.* | flow-print -f 5 
> > > 
> > > and sum the octets and packets together I get a value that seems to be
> > > divided by 100 to the really transfered amount of data!
> > > 
> > > E.G.
> > > 
> > > I transfer a file exactly 1024 MB and get a value thats around 130 MB (30
> > > persent headers and corrupt packets I thought).
> > > 
> > > Did anyone have the same problem? I really don't know what this could
> > > be! All vlans are correct and there should be the correct value for the
> > > octets but it isn't!
> > > 
> > > Any help would be quite nice!
> > > 
> > > Thank you!
> > > 
> > > Regards,
> > > 
> > > Heiko
> > > 
> > > 
> > > _______________________________________________
> > > flow-tools@splintered.net
> > > http://www.splintered.net/sw/flow-tools
> > 
> 
> 
> _______________________________________________
> flow-tools@splintered.net
> http://www.splintered.net/sw/flow-tools