|
ru.cisco
- RU.CISCO ---------------------------------------------------------------------
From : Alexander Objorin 2:5015/51 01 Feb 2002 10:07:54
To : Alex Bakhtin
Subject : Netflow problem
--------------------------------------------------------------------------------
DAS>> же, NetFlow иногда насчитывал в 1,5 - 2 раза большие значения, а
DAS>> иногда меньшие. Если меряли
AB> Большое количество дpопов на выходе?
У меня такая же бяка, данные по Netflow превышают значения трафика посчитанного
по ip accounting и netflow нашего первичника процентов на 15-20.
Считаю NetFlowMet
---------------- ip.slr
if SourcePeerType == IPv4 {
save SourcePeerAddress/32;
save DestPeerAddress/32;
save SourceInterface;
save DestInterface;
save SourceTransAddress/16;
save DestTransAddress/16;
save SourceTransType;
save MeterID;
save SourceASN;
save DestASN;
} else IGNORE ;
COUNT ;
FORMAT
FlowRuleSet FlowIndex FirstTime MeterID SourceTransType
SourcePeerAddress DestPeerAddress ToOctets FromOctets ToPDUs FromPDUs
SourceTransAddress DestTransAddress SourceInterface DestInterface SourceASN
DestASN;
SET 5 ;
---------------
Cisco
Cisco Internetwork Operating System Software
IOS (tm) 7200 Software (C7200-JO3S-M), Version 12.1(9), RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2001 by cisco Systems, Inc.
Входящий интерфейс
interface FastEthernet1/0
description Telecom-NN
ip address 1.2.3.4 255.255.255.252
ip nat outside
ip route-cache flow
half-duplex
end
FastEthernet1/0 is up, line protocol is up
Hardware is DEC21140A, address is 0005.5f7b.501c (bia 0005.5f7b.501c)
Description:
Internet address is 1.2.3.4/30
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 6/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Half-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 8/75/97/357732 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue :0/40 (size/max)
5 minute input rate 2638000 bits/sec, 589 packets/sec
5 minute output rate 534000 bits/sec, 586 packets/sec
1096004183 packets input, 2140586486 bytes
Received 25747 broadcasts, 0 runts, 0 giants, 80 throttles
1 input errors, 1 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog
1 input packets with dribble condition detected
1081578099 packets output, 1428120792 bytes, 0 underruns
474 output errors, 57 collisions, 2 interface resets
475 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
Исходящий - транком идет в каталист
FastEthernet0/0 is up, line protocol is up
Hardware is DEC21140A, address is 0005.5f7b.5000 (bia 0005.5f7b.5000)
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 8/255, rxload 3/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/16524/42981 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue :0/40 (size/max)
5 minute input rate 1235000 bits/sec, 914 packets/sec
5 minute output rate 3520000 bits/sec, 897 packets/sec
1512952347 packets input, 2185832367 bytes
Received 50923463 broadcasts, 0 runts, 0 giants, 6864 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog
0 input packets with dribble condition detected
1502299054 packets output, 1244286183 bytes, 0 underruns
0 output errors, 0 collisions, 96 interface resets
0 babbles, 0 late collision, 0 deferred
2 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
Alexander
--- ifmail v.2.15dev5
* Origin: Unknown (2:5015/51@fidonet)
Вернуться к списку тем, сортированных по: возрастание даты уменьшение даты тема автор
|
