ru.cisco

 
 - RU.CISCO ---------------------------------------------------------------------
 From : Dmitriy Svetlov                      2:5020/400     22 Oct 2002  14:31:03
 To : All
 Subject : netramet and cisco 3662
 -------------------------------------------------------------------------------- 
 

 Hi,
 Problem description:
 
 As you know NeTraMet data file flows is uniquely identified by flowindex 
 and
 firsttime fields. I found out that some flow with the same flowindex, 
 source and
 dest address and with permanently growing tooctets and fromoctets counters
 suddenly change firsttime value. In this case fd_filter program 
 calculate delta
 fields as for two different flows and give me wrong result. How can I 
 fix it ?
 Thanks
 
 Cisco configuration:
 
 !
 boot system flash:c3660-is-mz.122-12.bin
 !
 memory-size iomem 15
 ip subnet-zero
 ip rcmd rcp-enable
 ip rcmd rsh-enable
 ip cef
 !
 !
 !
 call rsvp-sync
 !
 !
 !
 !
 !
 fax interface-type fax-mail
 mta receive maximum-recipients 0
 !
 bridge irb
 !
 !
 interface FastEthernet0/0
   no ip address
   no ip redirects
   ip route-cache flow
   no ip mroute-cache
   duplex auto
   speed auto
 !
 interface FastEthernet0/0.27
   encapsulation dot1Q 27
   ip address 192.168.20.1 255.255.255.248
   no ip redirects
   ip nat inside
   ip policy route-map Users
   traffic-shape rate 128000 7936 7936 1000
 !
 interface FastEthernet0/1
   ip address 195.161.93.1 255.255.255.192 secondary
   ip address 217.107.66.18 255.255.255.252
   ip access-group 102 in
   ip access-group 103 out
   ip nat outside
   ip route-cache flow
   duplex auto
   speed auto
 !
 ip nat inside source static 192.168.20.2 195.161.93.12
 !
 ip flow-export source FastEthernet0/0.2
 ip flow-export version 5
 ip flow-export destination 10.253.1.40 9996
 ip classless
 ip route 0.0.0.0 0.0.0.0 217.107.66.17
 no ip http server
 !
 route-map Users deny 5
   match ip address 110
 !
 route-map Users permit 10
   match ip address 111
   set interface Null0
 !
 bridge 10 protocol ieee
 bridge 10 route ip
 !
 
 NeTraMet data file example:
 
 flowruleset     flowindex       firsttime       sourcepeeraddress
 destpeeraddress sourceasn       destasn tooctets        fromoctets 
 topdus
 frompdus        sourceinterface destinterface   sourcetransaddress
 desttransaddress
 5       131145  1082923714      62.118.254.100  195.161.93.12   0 
 0
 11039   0       18      0       0       0       0       0 
 
 5       134184  236549411       62.118.254.100  195.161.93.12   0 
 0
 181550  0       208     0       0       0       0       0 
 
 5       134184  236549411       62.118.254.100  195.161.93.12   0 
 0
 324288  0       371     0       0       0       0       0 
 
 5       134184  236549411       62.118.254.100  195.161.93.12   0 
 0
 469938  0       540     0       0       0       0       0 
 
 5       134184  236549411       62.118.254.100  195.161.93.12   0 
 0
 582609  0       666     0       0       0       0       0 
 
 5       134184  236549411       62.118.254.100  195.161.93.12   0 
 0
 609588  0       697     0       0       0       0       0 
 
 5       134184  236549411       62.118.254.100  195.161.93.12   0 
 0
 672860  0       758     0       0       0       0       0 
 
 5       134184  236549411       62.118.254.100  195.161.93.12   0 
 0
 759466  0       851     0       0       0       0       0 
 
 5       134184  232029082       62.118.254.100  195.161.93.12   0 
 0
 855314  0       954     0       0       0       0       0 
 
 5       140568  1518711957      62.118.254.100  195.161.93.12   0 
 0
 27819   0       30      0       0       0       0       0 
 
 5       140568  1518711957      62.118.254.100  195.161.93.12   0 
 0
 49100   0       54      0       0       0       0       0 
 
  
 
 fd_filter result for flow with flowindex = 134184
 
 d_tooctects
 11039
 181550
 142738
 145650
 112671
 26979
 63272
 86606
 855314
 27819
 21281
  
 
 expected result for flow with flowindex = 134184
 
 d_tooctets
 11039
 181550
 142738
 145650
 112671
 26979
 63272
 86606
 95848
 27819
 21281
 
 --- ifmail v.2.15dev5
  * Origin: MTU-Intel ISP (2:5020/400)
 
 

Вернуться к списку тем, сортированных по: возрастание даты  уменьшение даты  тема  автор