[flow-tools] C6509 / Native IOS / Flow-Tools (Take 2)
Tuc
tuc@ttsg.com
Mon, 13 May 2002 08:56:41 -0400 (EDT)
Hi,
Well, after 2 months, I finally got my IOS upgraded :
Cisco Internetwork Operating System Software
IOS (tm) c6sup2_rp Software (c6sup2_rp-PSV-M), Version 12.1(8b)E10, EARLY DEPLOYMENT RELEASE SOFTWARE (fc3)
TAC Support: http://www.cisco.com/tac
Copyright (c) 1986-2002 by cisco Systems, Inc.
Compiled Wed 17-Apr-02 19:06 by hqluong
Image text-base: 0x40008980, data-base: 0x413BE000
ROM: System Bootstrap, Version 12.1(3r)E2, RELEASE SOFTWARE (fc1)
BOOTFLASH: c6sup2_rp Software (c6sup2_rp-PSV-M), Version 12.1(8b)E10, EARLY DEPLOYMENT RELEASE SOFTWARE (fc3)
TTSG-6509 uptime is 1 day, 4 hours, 39 minutes
System returned to ROM by power-on (SP by power-on)
System restarted at 04:13:55 EDT Sun May 12 2002
System image file is "bootflash:c6sup12-psv-mz.121-8b.E10.bin"
cisco Catalyst 6000 (R7000) processor with 489472K/34816K bytes of memory.
Processor board ID SAD05030NAK
R7000 CPU at 300Mhz, Implementation 39, Rev 2.1, 256KB L2, 1024KB L3 Cache
Last reset from power-on
X.25 software, Version 3.0.0.
Bridging software.
19 Virtual Ethernet/IEEE 802.3 interface(s)
72 FastEthernet/IEEE 802.3 interface(s)
4 Gigabit Ethernet/IEEE 802.3 interface(s)
381K bytes of non-volatile configuration memory.
16384K bytes of Flash internal SIMM (Sector size 512K).
Configuration register is 0x2102
So, now I try to get back to getting the tools to give me some
decent information. I'm still following :
http://www.pairlist.net/pipermail/flow-tools/2001-September/000022.html
with a tweak or two from Mark Fullmer.
I have :
TTSG-6509#sho run | inc ip flow-export
ip flow-export source Vlan1
ip flow-export version 5
ip flow-export destination FLOWTOOLS.MACHINE 2055
But something weird :
TTSG-6509#config t
Enter configuration commands, one per line. End with CNTL/Z.
TTSG-6509(config)#mls nde src_address VLAN1IP version 7
TTSG-6509(config)#exit
TTSG-6509#sho run | inc mls nde
mls nde sender
TTSG-6509#
I seem to be generating records :
TTSG-6509#sho ip flow export
Flow export is enabled
Exporting flows to 192.136.64.27 (2055)
Exporting using source interface Vlan1
Version 5 flow records
70 flows exported in 15 udp datagrams
0 flows failed due to lack of export packet
0 export packets were sent up to process level
0 export packets were dropped due to no fib
0 export packets were dropped due to adjacency issues
0 export packets were dropped due to fragmentation failures
0 export packets were dropped due to encapsulation fixup failures
0 export packets were dropped enqueuing for the RP
0 export packets were dropped due to IPC rate limiting
TTSG-6509#sho mls nde
Netflow Data Export enabled
Exporting flows to 192.136.64.27 (2055)
Exporting flows from 216.231.111.30 (52004)
Version: 7
Include Filter not configured
Exclude Filter not configured
Total Netflow Data Export Packets are:
371989 packets, 0 no packets, 10043659 records
Total Netflow Data Export Send Errors:
IPWRITE_NO_FIB = 0
IPWRITE_ADJ_FAILED = 0
IPWRITE_PROCESS = 1
IPWRITE_ENQUEUE_FAILED = 0
IPWRITE_IPC_FAILED = 0
IPWRITE_MTU_FAILED = 0
IPWRITE_ENCAPFIX_FAILED = 0
The output isn't as whacked as before, but :
# /usr/local/netflow/bin/flow-print < ft-v07.2002-05-12.155001-0400|more
srcIP dstIP router_sc prot srcPort
dstPort octets packets
0 195.15.83.36/0 VLAN1BASEIP 0 0
0 15800 33
0 195.15.83.36/0 VLAN1BASEIP 0 0
0 0 0
0 4.24.21.38/0 VLAN1BASEIP 0 0
0 0 0
0 12.127.16.67/0 VLAN1BASEIP 0 0
0 0 0
0 194.230.174.249/0 VLAN1BASEIP 0 0
0 52068 104
0 63.188.143.176/0 VLAN1BASEIP 0 0
0 448461 803
0 172.178.10.228/0 VLAN1BASEIP 0 0
0 325521 268
0 62.37.23.122/0 VLAN1BASEIP 0 0
0 617688 1119
0 212.185.253.1/0 VLAN1BASEIP 0 0
0 5731 15
0 62.4.175.205/0 VLAN1BASEIP 0 0
0 4475 4
0 68.4.201.2/0 VLAN1BASEIP 0 0
0 0 0
0 24.160.148.212/0 VLAN1BASEIP 0 0
0 5425 8
0 213.25.196.95/0 VLAN1BASEIP 0 0
0 184701 208
0 212.152.204.18/0 VLAN1BASEIP 0 0
0 2081 4
0 216.88.66.20/0 VLAN1BASEIP 0 0
0 8545 18
0 209.16.20.147/0 VLAN1BASEIP 0 0
0 460 5
0 193.249.244.10/0 VLAN1BASEIP 0 0
Anyone else doing this on a 6509 with Native (Sup1A)
Thanks, Tuc/TTSG Internet Services, Inc.