Datasheet

ManualsBrandsCisco ManualsComputer equipment1701-K9-RF - 1701 ADSL Security Access Router

261

262

263

264

265

266

267

268

269

270

Lab – Collecting and Analyzing NetFlow Data

2 active, 4094 inactive, 114 added

1546 ager polls, 0 flow alloc failures

Active flows timeout in 30 minutes

Inactive flows timeout in 15 seconds

IP Sub Flow Cache, 34056 bytes

0 active, 1024 inactive, 112 added, 112 added to flow

0 alloc failures, 0 force free

1 chunk, 1 chunk added

last clearing of statistics 00:07:35

Protocol Total Flows Packets Bytes Packets Active(Sec) Idle(Sec)

-------- Flows /Sec /Flow /Pkt /Sec /Flow /Flow

TCP-Telnet 4 0.0 27 43 0.2 5.0 15.7

TCP-WWW 104 0.2 14 275 3.4 2.1 1.5

ICMP 4 0.0 1000 100 8.8 27.9 15.4

SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts

Total: 112 0.2 50 146 12.5 3.1 2.5

SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts

Se0/0/0 192.168.12.1 Null 224.0.0.5 59 0000 0000 43

Se0/0/1 192.168.23.2 Null 224.0.0.5 59 0000 0000 40

Step 3: End the Telnet and browser sessions.

a. Issue the exit command on R1 to disconnect from the Telnet session to R3.

b. Close the browser session on PC-A.

Step 4: Clear NetFlow accounting statistics.

a. On R2, issue the clear ip flow stats command to clear NetFlow accounting statistics.

R2# clear ip flow stats

b. Re-issue the show ip cache flow command to verify that the NetFlow accounting statistics have been

reset. Notice that, even though you are no longer generating data through R2, data is being picked up by

NetFlow. In the example below, the destination address for this traffic is multicast address 224.0.0.5, or

OSPF LSA data.

R2# show ip cache flow

IP packet size distribution (124 total packets):

1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480

.000 .000 1.00 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000

512 544 576 1024 1536 2048 2560 3072 3584 4096 4608

.000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000

IP Flow Switching Cache, 278544 bytes

2 active, 4094 inactive, 2 added

1172 ager polls, 0 flow alloc failures

Active flows timeout in 30 minutes

Inactive flows timeout in 15 seconds

IP Sub Flow Cache, 34056 bytes