[flow-tools] Cat6500 and Netflow

Shane Dawalt shane.dawalt at wright.edu
Wed Aug 31 16:22:13 EDT 2005


   I have a native-mode Cat6500 (6513 actually) that I have configured 
for nde to a dual AMD64 box.  The current flow mode is destination-only 
(that may change).  I have flow-capture running on a dual AMD64 box 
(0.68) running atop RedHat Enterprise Linux v.3 (2.4 kernel). The 
flow-capture application is occasionally reporting lost flows: anywhere 
from 270 down to 100ish.  It doesn't happen very often, but when it does 
it usually happens several times in succession.  That implies maybe lots 
of traffic on the switch.  I've tweaked the long-duration flow aging 
time to 128 seconds and the ip statistics flows fast aging time to 32 
seconds with a packet threshold of 0.  I've see the Netflow entries 
counter increase to 15000 or so, but as I understand it, the 6513 should 
support upto 32000.  Anyone have pointers on where to go from here?

  Shane





More information about the flow-tools mailing list