Specifications

5-3

Catalyst 6500 Series Switch and Cisco 7600 Series Router Network Analysis Module Installation and Configuration Note

78-16413-01

Chapter 5 Troubleshooting the Network Analysis Module

Netflow Data Export

To verify that a NetFlow device is configured to send NetFlow packets to UDP port 3000 of the

NAM, use the following commands:

Router# show ip flow export

Router# show mls nde

Displayed information should show whether or not NetFlow export is enabled or disabled and show

the IP address and port to which the NetFlow packets are being exported. If the information is not

correct, refer to the configuration section in the User Guide for the Network Analysis Module Traffic

Analyzer Release 3.3.

Explanation There is no data for NetFlow data sources that are configured for specific interfaces, but

the default NetFlow data source for the device has data.

Recommended Action This problem could occur because a NetFlow record that contains the specified

interfaces information does not exist. To find out which interfacesthe NetFlow records have, follow

these steps:

Step 1 Go to the Setup > Data Sources > NetFlow > Listening Mode screen.

Step 2 Click Start to initiate the listening process.

Step 3 Wait until the row for the device has more than three NDE packets counted.

Step 4 Select the device.

Step 5 Click Details. A window appears displaying a list of interfaces that the NAM has seen in the NDE

packets.

Step 6 Make sure that the interfaces selected for the NetFlow devices are included in the list. If the interfaces

are not included in the list, configure the NetFlow source devices using the following commands:

For the IP routed cache, use these commands:

Router(config)# interface

type slot/port

Router(config-if)# ip route cache flow

For the MLS cache, use these commands for Cisco IOS software:

Router(config)# mls nde interface

For the MLS cache, use these commands for the Catalyst operating system software:

Console>(enable) set mls nde destination-ifindex enable

Console>(enable) set mls nde source-ifindex enable

Make sure that the flow mask is set to full, interface-destination-source, or interface-full.

If the information is not correct, refer to the configuration section in the User guide for Network

Analysis Module Traffic Analyzer Release 3.3.