[MaDDoG]

Слудующая ситуация:

 

Есть сервер с сеткой 172.17.254.0/28, трафик до него гоняется в вилане, абоненты сидят в сети 172.17.х.0/24

 

Требуется посчитать трафик между абонентами и сервером.

 

Настроил все по докам http://cisco.com/en/US/products/hw/switche...080721701.shtml не считает, когда заворачиваешь трафик на loopback все обсчитывается, но падает производительно и загрузка проца подскакивает до 99%, т.к. работает в режиме process switching

 

вот кусок конфига, при котором работает, но грузит проц:

 

ip flow-export version 5

ip flow-export destination 172.17.0.8 9996

ip flow-aggregation cache protocol-port

enabled

 

!

interface Vlan50

ip address 172.17.254.1 255.255.255.240

ip accounting output-packets

ip route-cache flow

ip policy route-map to_lo0

end

 

route-map to_lo0, permit, sequence 10

Match clauses:

Set clauses:

interface Loopback0

Policy routing matches: 179578584 packets, 1879016826 bytes

 

у кого есть какие мысли как сделать без loopback?

[MaDDoG]

P.S. IOS c6msfc2-boot-mz.121-11b.E4.bin

[E-38]

Попробуй добавить эти строки:

ip route-cache flow infer-fields

ip flow ingress infer-fields

ip flow-export source Vlan1

P.S. Надо что бы трафик роутился через супервизор, свитчовый считать не будет.

[MaDDoG]

ip route-cache flow infer-fields

ip flow ingress infer-fields

вот это не принимает нигде

[D^2]

P.S. IOS c6msfc2-boot-mz.121-11b.E4.bin

с чего Вы взяли, что у Вас такой ИОС?

sh ver

dir all

покажите

[MaDDoG]

#sh ver

Cisco Internetwork Operating System Software

IOS ™ c6sup2_rp Software (c6sup2_rp-JK2O3SV-M), Version 12.1(27b)E2, RELEASE

SOFTWARE (fc2)

Technical Support: http://www.cisco.com/techsupport

Copyright © 1986-2007 by cisco Systems, Inc.

Compiled Wed 06-Jun-07 20:50 by hqluong

Image text-base: 0x40008F90, data-base: 0x41D7E000

 

ROM: System Bootstrap, Version 12.1(11r)E1, RELEASE SOFTWARE (fc1)

BOOTLDR: c6sup2_rp Software (c6sup2_rp-JK2O3SV-M), Version 12.1(27b)E2, RELEASE

SOFTWARE (fc2)

 

c6509 uptime is 1 week, 4 days, 4 hours, 11 minutes

Time since c6509 switched to active is 1 week, 4 days, 4 hours, 10 minutes

System returned to ROM by power-on (SP by power-on)

System image file is "sup-bootflash:c6sup22-jk2o3sv-mz.121-27b.E2.bin"

 

 

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

 

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

 

If you require further assistance please contact us by sending email to

export@cisco.com.

 

cisco WS-C6509 (R7000) processor (revision 3.0) with 458752K/65536K bytes of mem

ory.

Processor board ID SAL08332DX6

R7000 CPU at 300Mhz, Implementation 39, Rev 3.3, 256KB L2, 1024KB L3 Cache

Last reset from power-on

Bridging software.

X.25 software, Version 3.0.0.

SuperLAT software (copyright 1990 by Meridian Technology Corp).

TN3270 Emulation software.

185 Virtual Ethernet/IEEE 802.3 interface(s)

72 FastEthernet/IEEE 802.3 interface(s)

18 Gigabit Ethernet/IEEE 802.3 interface(s)

381K bytes of non-volatile configuration memory.

 

32768K bytes of Flash internal SIMM (Sector size 512K).

Configuration register is 0x2102

 

#dir all

Directory of sup-bootflash:/

 

1 -rw- 27126860 Jun 22 2007 09:49:27 +10:00 c6sup22-jk2o3sv-mz.121-27b

.E2.bin

 

31981568 bytes total (4854580 bytes free)

Directory of sup-microcode:/

 

1 -r-- 2428870 <no date> CWPA_version_10.10

2 -r-- 3950950 <no date> CWTLC_version_10.10

3 -r-- 11689670 <no date> DRACO2_MP

4 -r-- 3599462 <no date> CHILIS-LC

5 -r-- 312632 <no date> LCP_LX10100

6 -r-- 372994 <no date> LCP_LX1000

7 -r-- 307256 <no date> LCP_AX1000

8 -r-- 372322 <no date> LCP_AX10100

9 -r-- 772094 <no date> LCP_CPSLCP

10 -r-- 355278 <no date> LCP_CPFAB

11 -r-- 687566 <no date> LCP_CPGBIT

12 -r-- 678654 <no date> LCP_CP10G

13 -r-- 744126 <no date> LCP_CPMBIT2

14 -r-- 840766 <no date> LCP_CPMBIT

 

27113088 bytes total (0 bytes free)

Directory of const_nvram:/

 

1 -rw- 16996 <no date> vlan.dat

 

129004 bytes total (112008 bytes free)

Directory of system:/

 

2 dr-x 0 <no date> memory

1 -rw- 292843 <no date> running-config

12 dr-x 0 <no date> vfiles

 

No space information available

Directory of nvram:/

 

1 -rw- 291380 <no date> startup-config

2 ---- 24 <no date> private-config

3 -rw- 291380 <no date> underlying-config

 

391160 bytes total (99704 bytes free)

Directory of bootflash:/

 

1 -rw- 1693300 Jan 08 2004 13:53:05 +10:00 c6msfc2-boot-mz.121-8b.EX3

2 -rw- 1734148 Mar 13 2006 16:35:40 +10:00 flash

3 -rw- 1734148 Mar 13 2006 16:38:54 +10:00 c6msfc2-boot-mz.121-11b.E4

.bin

4 -rw- 12563288 Mar 13 2006 16:41:25 +10:00 c6msfc2-jsv-mz.121-11b.E4.

bin

 

31457280 bytes total (13731884 bytes free)

[MaDDoG]

ip flow-export source Vlan1

Помогло, трафик считается загрузка проца 8%. Всем спасибо.