ПРОЕКТЫ 

  АРХИВ 

Apache-Talk @lexa.ru 

Inet-Admins @info.east.ru 

Filmscanners @halftone.co.uk 

Security-alerts @yandex-team.ru 

nginx-ru @sysoev.ru 

  СТАТЬИ 

  ПЕРСОНАЛЬНОЕ 

  ПРОГРАММЫ 

ПИШИТЕ
ПИСЬМА












     АРХИВ :: Inet-Admins
Inet-Admins mailing list archive (inet-admins@info.east.ru)
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re[2]: [inet-admins] Flow export

Спасибо!
Действительно, на 7505 ip cef был поднят, а на 3640 - нет.
Заработало.

Осталось непонятным, почему в отсутствии cef это все-таки работало с
hostA. Будет над чем подумать :)

Friday, June 29, 2001, 14:19, Oleg V Semenihin <sow@comch.ru> wrote:
> Было тоже самое, пока не включил
> ip cef


>>   Коллеги, кто-нибудь сталкивался с подобной проблемой?
>>
>> Есть две cisco 7505 и 3640, есть два сервера A(FreeBSD) и B(Linux).
>> (есть еще cisco 4000, но это не принципиально). Соединено все это так
>>
>> c7505      c3640
>>   |          |        y.y.y.0/24
>> ----------------------
>>                 |
>>               c4000
>>                 |     x.x.x.0/24
>> -----------------------
>>   |         |
>> host A     host B
>>
>> на с7505 и с3640 поднят ip flow-export dest hostA.
>> На hostA это ловится NeTraMet-ом.
>> Все работает, все замечательно.
>>
>> Возникла  необходимость перенести сбор на hostB.
>> Тут начались чудеса. На c7505 смена  ip flow-export dest hostB
>> прошла нормально (до hostB долетают udp-пакеты и он их успешно ловит)
>> А вот на с3640 смена  ip flow-export dest hostB привела к тому, что
>> udp-пакеты просто не долетают до hostB. Они не пролетают даже через
>> c4000. Пробовал на с3640 clear всего чего можно, даже reload не помог.
>> При этом sh ip flow export показывает, что испровно выплевывает
>> пакеты.
>>
>> Попробовал на c3640  востановить ip flow-export dest hostA и при этом
>> убрал с hostA его ip-адрес и прописал его на hostB. При этом на hostB
>> стали сыпаться какое-то время (~5мин) пакеты. А потом снова перестали.
>> Такое ощущение, что hostB каким-то образом активно давит передачу
>> пакетов с netflow на него.
>>
>> У кого какие идеи? может кто-то уже наступал на это?
>>
>> sh ver и sh ip flow export с обеих цисок  ниже
>>
>> --- с7505 ---------------
>> sh ver
>> Cisco Internetwork Operating System Software
>> IOS (tm) RSP Software (RSP-JSV-M), Version 12.1(7), RELEASE SOFTWARE (fc1)
>> Copyright (c) 1986-2001 by cisco Systems, Inc.
>> Compiled Fri 23-Feb-01 04:47 by kellythw
>> Image text-base: 0x60010958, data-base: 0x61442000
>>
>> ROM: System Bootstrap, Version 5.3.2(3.2) [kmac 3.2], MAINTENANCE INTERIM
> SOFTWARE
>> BOOTFLASH: GS Bootstrap Software (RSP-BOOT-M), Version 11.0(4.5),
> MAINTENANCE INTERIM SOFTWARE
>>
>> MSK-M9-1 uptime is 6 days, 18 hours, 3 minutes
>> System returned to ROM by power-on
>> System restarted at 18:59:47 MSK Fri Jun 22 2001
>> System image file is "slot1:rsp-jsv-mz.121-7.bin"
>>
>> cisco RSP1 (R4600) processor with 131072K/2072K bytes of memory.
>> R4600 CPU at 100Mhz, Implementation 32, Rev 2.0
>> Last reset from power-on
>> G.703/E1 software, Version 1.0.
>> G.703/JT2 software, Version 1.0.
>> X.25 software, Version 3.0.0.
>> SuperLAT software (copyright 1990 by Meridian Technology Corp).
>> Bridging software.
>> TN3270 Emulation software.
>> Chassis Interface.
>> 1 EIP controller (4 Ethernet).
>> 1 FSIP controller (8 Serial).
>> 1 AIP controller (1 ATM).
>> 4 Ethernet/IEEE 802.3 interface(s)
>> 8 Serial network interface(s)
>> 1 ATM network interface(s)
>> 125K bytes of non-volatile configuration memory.
>>
>> 8192K bytes of Flash PCMCIA card at slot 0 (Sector size 128K).
>> 20480K bytes of Flash PCMCIA card at slot 1 (Sector size 128K).
>> 8192K bytes of Flash internal SIMM (Sector size 256K).
>> Configuration register is 0x2102
>>
>> sh ip flow export
>> Flow export is enabled
>>   Exporting flows to x.x.x.192 (3025)
>>   Exporting using source IP address y.y.y.143
>>   Version 5 flow records
>>   19163477 flows exported in 640364 udp datagrams
>>   0 flows failed due to lack of export packet
>>   3 export packets were sent up to process level
>>   0 export packets were dropped due to no fib
>>   0 export packets were dropped due to adjacency issues
>>   0 export packets were dropped due to fragmentation failures
>>   0 export packets were dropped due to encapsulation fixup failures
>>   0 export packets were dropped enqueuing for the RP
>>   0 export packets were dropped due to IPC rate limiting
>>
>> --- с3640 ---------------
>>
>> sh ver
>> Cisco Internetwork Operating System Software
>> IOS (tm) 3600 Software (C3640-IS-M), Version 12.1(5)T4,  RELEASE SOFTWARE
> (fc1)
>> TAC Support: http://www.cisco.com/cgi-bin/ibld/view.pl?i=support
>> Copyright (c) 1986-2001 by cisco Systems, Inc.
>> Compiled Fri 02-Feb-01 03:31 by ccai
>> Image text-base: 0x60008950, data-base: 0x61140000
>>
>> ROM: System Bootstrap, Version 11.1(20)AA2, EARLY DEPLOYMENT RELEASE
> SOFTWARE (fc1)
>> ROM: 3600 Software (C3640-IS-M), Version 12.1(5)T4,  RELEASE SOFTWARE
> (fc1)
>>
>> tcss-2 uptime is 17 hours, 43 minutes
>> System returned to ROM by reload at 19:21:45 MSD Thu Jun 28 2001
>> System restarted at 19:22:55 MSD Thu Jun 28 2001
>> System image file is "flash:c3640-is-mz.121-5.T4.bin"
>>
>> cisco 3640 (R4700) processor (revision 0x00) with 125952K/5120K bytes of
> memory.
>> Processor board ID 24364910
>> R4700 CPU at 100Mhz, Implementation 33, Rev 1.0
>> Bridging software.
>> X.25 software, Version 3.0.0.
>> SuperLAT software (copyright 1990 by Meridian Technology Corp).
>> 2 FastEthernet/IEEE 802.3 interface(s)
>> DRAM configuration is 64 bits wide with parity disabled.
>> 125K bytes of non-volatile configuration memory.
>> 16384K bytes of processor board System flash (Read/Write)
>>
>> Configuration register is 0x2102
>>
>>
>> tcss-2#sh ip flow export
>> Flow export is enabled
>>   Exporting flows to x.x.x.65 (2055)
>>   Exporting using source IP address y.y.y.115
>>   Version 5 flow records
>>   17009943 flows exported in 573436 udp datagrams
>>   0 flows failed due to lack of export packet
>>   43915 export packets were sent up to process level
>>   0 export packets were dropped due to no fib
>>   0 export packets were dropped due to adjacency issues
>>   0 export packets were dropped due to fragmentation failures
>>   0 export packets were dropped due to encapsulation fixup failures
>>
>> -----------------------------------------------
>>
>>
>>
>>
>>
>>
>> --
>> Best regards,
>>   Sergey Zorin           mailto:zorin@iip.net
>>   NOC IIP-Net         phone: +7 095  137 3104
>>   SZ563, SZ563-RIPN
>>
>>
>>
> ============================================================================
> =
>> "inet-admins" Internet access mailing list. Maintained by East Connection
> ISP.
>> Mail "unsubscribe inet-admins" to Majordomo@info.east.ru if you want to
> quit.
>> Archive is accessible on http://info.east.ru/rus/inetadm.html
>>


> =============================================================================
> "inet-admins" Internet access mailing list. Maintained by East Connection ISP.
> Mail "unsubscribe inet-admins" to Majordomo@info.east.ru if you want to quit.
> Archive is accessible on http://info.east.ru/rus/inetadm.html


-- 
Best regards,
  Sergey Zorin           mailto:zorin@iip.net
  NOC IIP-Net         phone: +7 095  137 3104
  SZ563, SZ563-RIPN


=============================================================================
"inet-admins" Internet access mailing list. Maintained by East Connection ISP.
Mail "unsubscribe inet-admins" to Majordomo@info.east.ru if you want to quit.
Archive is accessible on http://info.east.ru/rus/inetadm.html

 



Copyright © Lexa Software, 1996-2009.