Skip to Content.
Sympa Menu

wg-multicast - IPv4 multicast Netflow question...

Subject: All things related to multicast

List archive

IPv4 multicast Netflow question...


Chronological Thread 
  • From: Tim Chown <>
  • To:
  • Subject: IPv4 multicast Netflow question...
  • Date: Fri, 27 Jun 2008 14:37:51 +0100

Hi,

We're using nsfen as our Netflow collector, and sending flow data from
a Cisco 6509 (dual-stack, but just sending IPv4 data) and a 7206 (IPv6
only router, so just IPv6 flows).

Everything's fine for IPv4 and IPv6 unicast, and IPv6 multicast, except
that we're missing IPv4 multicast flow data from the 6509.

It appears that the 6509 is holding the flow data, e.g. if you query the
data with

show ip cache verbose flow

the returned results include multicast flow data e.g.

SrcIf SrcIPaddress DstIPaddress Pr SrcP
DstP Pkts

Vl10 152.78.nn.nn 224.2.127.254 udp 9875
9875 117
Vl29 152.78.nn.nn 239.255.255.250 udp 55428
1900 5
Vl10 152.78.nn.nn 233.3.18.5 udp 1024
30185 2849

but querying nfsen for records matching either by specific IP or by
multicast network blocks returns no matches.

The 6509 is running 12.2(18)SXF9.

The related config is:

ip multicast-routing
ipv6 multicast-routing
mls ip multicast flow-stat-timer 9
mls flow ip full
no mls flow ipv6

ip flow-export destination nn.nn.nn.nn nnnn

Is there some extra config required? The examples we see online are for
ingress or egress multicast flow gathering on a per-interface basis,
but the above config is global to the router (all interfaces)?

Suggestions welcome!

--
Tim


  • IPv4 multicast Netflow question..., Tim Chown, 06/27/2008

Archive powered by MHonArc 2.6.16.

Top of Page