From: Pranav Shah (pranav@exchange.napster.com)
Date: Thu Mar 21 2002 - 14:09:24 PST
Greetings..
I have been tearing my hair out trying to figure out why I only see
multicast IPs in "dst IP" field in flows.current file. I have the Cisco
setup correctly I am very sure as well as cflowd.conf. When I perform a 'sh
ip cache flow' on the cisco router, I do see multicast as well as other
packets in the dst IP field.
What am I doing wrong?
Here is my set up on the cisco
ip flow-export source Loopback0
ip flow-export version 5 peer-as
ip flow-export destination x.x.x.x 2055
ip flow-aggregation cache as
cache entries 20000
enabled
My cflowd.conf looks like this..
COLLECTOR {
HOST: x.x.x.x
ADDRESSES: 127.0.0.1
}
CISCOEXPORTER {
HOST: x.x.x.x # IP address of Cisco sending data.
ADDRESSES: { x.x.x.x,
x.x.x.x,
x.x.x.x } # Addresses of interfaces on
Cisco
CFDATAPORT: 2055 # Port on which to listen for data.
SNMPCOMM: x.x.x.x # SNMP community name.
LOCALAS: xxxx # Local AS of Cisco sending data.
COLLECT: { protocol, portmatrix, ifmatrix, nexthop, netmatrix,
asmatrix, tos, flows }
}
Any ideas as to why I might be seeing only multicasts ?
thanks,
Pranav Shah
This archive was generated by hypermail 2.1.4 : Mon Mar 25 2002 - 11:16:01 PST