[Cflowd] dst IP only Multicast

From: Pranav Shah (pranav@exchange.napster.com)
Date: Thu Mar 21 2002 - 14:09:24 PST


I have been tearing my hair out trying to figure out why I only see
multicast IPs in "dst IP" field in flows.current file. I have the Cisco
setup correctly I am very sure as well as cflowd.conf. When I perform a 'sh
ip cache flow' on the cisco router, I do see multicast as well as other
packets in the dst IP field.

What am I doing wrong?

Here is my set up on the cisco

ip flow-export source Loopback0
ip flow-export version 5 peer-as
ip flow-export destination x.x.x.x 2055
ip flow-aggregation cache as
 cache entries 20000

My cflowd.conf looks like this..

  HOST: x.x.x.x

  HOST: x.x.x.x # IP address of Cisco sending data.
  ADDRESSES: { x.x.x.x,
                                x.x.x.x } # Addresses of interfaces on
  CFDATAPORT: 2055 # Port on which to listen for data.
  SNMPCOMM: x.x.x.x # SNMP community name.
  LOCALAS: xxxx # Local AS of Cisco sending data.
  COLLECT: { protocol, portmatrix, ifmatrix, nexthop, netmatrix,
                  asmatrix, tos, flows }

Any ideas as to why I might be seeing only multicasts ?


Pranav Shah

This archive was generated by hypermail 2.1.4 : Mon Mar 25 2002 - 11:16:01 PST