Было тоже самое, пока не включил
ip cef
> Коллеги, кто-нибудь сталкивался с подобной проблемой?
>
> Есть две cisco 7505 и 3640, есть два сервера A(FreeBSD) и B(Linux).
> (есть еще cisco 4000, но это не принципиально). Соединено все это так
>
> c7505 c3640
> | | y.y.y.0/24
> ----------------------
> |
> c4000
> | x.x.x.0/24
> -----------------------
> | |
> host A host B
>
> на с7505 и с3640 поднят ip flow-export dest hostA.
> На hostA это ловится NeTraMet-ом.
> Все работает, все замечательно.
>
> Возникла необходимость перенести сбор на hostB.
> Тут начались чудеса. На c7505 смена ip flow-export dest hostB
> прошла нормально (до hostB долетают udp-пакеты и он их успешно ловит)
> А вот на с3640 смена ip flow-export dest hostB привела к тому, что
> udp-пакеты просто не долетают до hostB. Они не пролетают даже через
> c4000. Пробовал на с3640 clear всего чего можно, даже reload не помог.
> При этом sh ip flow export показывает, что испровно выплевывает
> пакеты.
>
> Попробовал на c3640 востановить ip flow-export dest hostA и при этом
> убрал с hostA его ip-адрес и прописал его на hostB. При этом на hostB
> стали сыпаться какое-то время (~5мин) пакеты. А потом снова перестали.
> Такое ощущение, что hostB каким-то образом активно давит передачу
> пакетов с netflow на него.
>
> У кого какие идеи? может кто-то уже наступал на это?
>
> sh ver и sh ip flow export с обеих цисок ниже
>
> --- с7505 ---------------
> sh ver
> Cisco Internetwork Operating System Software
> IOS (tm) RSP Software (RSP-JSV-M), Version 12.1(7), RELEASE SOFTWARE (fc1)
> Copyright (c) 1986-2001 by cisco Systems, Inc.
> Compiled Fri 23-Feb-01 04:47 by kellythw
> Image text-base: 0x60010958, data-base: 0x61442000
>
> ROM: System Bootstrap, Version 5.3.2(3.2) [kmac 3.2], MAINTENANCE INTERIM
SOFTWARE
> BOOTFLASH: GS Bootstrap Software (RSP-BOOT-M), Version 11.0(4.5),
MAINTENANCE INTERIM SOFTWARE
>
> MSK-M9-1 uptime is 6 days, 18 hours, 3 minutes
> System returned to ROM by power-on
> System restarted at 18:59:47 MSK Fri Jun 22 2001
> System image file is "slot1:rsp-jsv-mz.121-7.bin"
>
> cisco RSP1 (R4600) processor with 131072K/2072K bytes of memory.
> R4600 CPU at 100Mhz, Implementation 32, Rev 2.0
> Last reset from power-on
> G.703/E1 software, Version 1.0.
> G.703/JT2 software, Version 1.0.
> X.25 software, Version 3.0.0.
> SuperLAT software (copyright 1990 by Meridian Technology Corp).
> Bridging software.
> TN3270 Emulation software.
> Chassis Interface.
> 1 EIP controller (4 Ethernet).
> 1 FSIP controller (8 Serial).
> 1 AIP controller (1 ATM).
> 4 Ethernet/IEEE 802.3 interface(s)
> 8 Serial network interface(s)
> 1 ATM network interface(s)
> 125K bytes of non-volatile configuration memory.
>
> 8192K bytes of Flash PCMCIA card at slot 0 (Sector size 128K).
> 20480K bytes of Flash PCMCIA card at slot 1 (Sector size 128K).
> 8192K bytes of Flash internal SIMM (Sector size 256K).
> Configuration register is 0x2102
>
> sh ip flow export
> Flow export is enabled
> Exporting flows to x.x.x.192 (3025)
> Exporting using source IP address y.y.y.143
> Version 5 flow records
> 19163477 flows exported in 640364 udp datagrams
> 0 flows failed due to lack of export packet
> 3 export packets were sent up to process level
> 0 export packets were dropped due to no fib
> 0 export packets were dropped due to adjacency issues
> 0 export packets were dropped due to fragmentation failures
> 0 export packets were dropped due to encapsulation fixup failures
> 0 export packets were dropped enqueuing for the RP
> 0 export packets were dropped due to IPC rate limiting
>
> --- с3640 ---------------
>
> sh ver
> Cisco Internetwork Operating System Software
> IOS (tm) 3600 Software (C3640-IS-M), Version 12.1(5)T4, RELEASE SOFTWARE
(fc1)
> TAC Support: http://www.cisco.com/cgi-bin/ibld/view.pl?i=support
> Copyright (c) 1986-2001 by cisco Systems, Inc.
> Compiled Fri 02-Feb-01 03:31 by ccai
> Image text-base: 0x60008950, data-base: 0x61140000
>
> ROM: System Bootstrap, Version 11.1(20)AA2, EARLY DEPLOYMENT RELEASE
SOFTWARE (fc1)
> ROM: 3600 Software (C3640-IS-M), Version 12.1(5)T4, RELEASE SOFTWARE
(fc1)
>
> tcss-2 uptime is 17 hours, 43 minutes
> System returned to ROM by reload at 19:21:45 MSD Thu Jun 28 2001
> System restarted at 19:22:55 MSD Thu Jun 28 2001
> System image file is "flash:c3640-is-mz.121-5.T4.bin"
>
> cisco 3640 (R4700) processor (revision 0x00) with 125952K/5120K bytes of
memory.
> Processor board ID 24364910
> R4700 CPU at 100Mhz, Implementation 33, Rev 1.0
> Bridging software.
> X.25 software, Version 3.0.0.
> SuperLAT software (copyright 1990 by Meridian Technology Corp).
> 2 FastEthernet/IEEE 802.3 interface(s)
> DRAM configuration is 64 bits wide with parity disabled.
> 125K bytes of non-volatile configuration memory.
> 16384K bytes of processor board System flash (Read/Write)
>
> Configuration register is 0x2102
>
>
> tcss-2#sh ip flow export
> Flow export is enabled
> Exporting flows to x.x.x.65 (2055)
> Exporting using source IP address y.y.y.115
> Version 5 flow records
> 17009943 flows exported in 573436 udp datagrams
> 0 flows failed due to lack of export packet
> 43915 export packets were sent up to process level
> 0 export packets were dropped due to no fib
> 0 export packets were dropped due to adjacency issues
> 0 export packets were dropped due to fragmentation failures
> 0 export packets were dropped due to encapsulation fixup failures
>
> -----------------------------------------------
>
>
>
>
>
>
> --
> Best regards,
> Sergey Zorin mailto:zorin@iip.net
> NOC IIP-Net phone: +7 095 137 3104
> SZ563, SZ563-RIPN
>
>
>
============================================================================
=
> "inet-admins" Internet access mailing list. Maintained by East Connection
ISP.
> Mail "unsubscribe inet-admins" to Majordomo@info.east.ru if you want to
quit.
> Archive is accessible on http://info.east.ru/rus/inetadm.html
>
=============================================================================
"inet-admins" Internet access mailing list. Maintained by East Connection ISP.
Mail "unsubscribe inet-admins" to Majordomo@info.east.ru if you want to quit.
Archive is accessible on http://info.east.ru/rus/inetadm.html