manuelkasper / AS-Stats

A simple tool to generate per-AS traffic graphs from NetFlow/sFlow records
BSD 2-Clause "Simplified" License
196 stars 67 forks source link

Documentational issue for IOS on C6880-X #56

Open crazzy opened 7 years ago

crazzy commented 7 years ago

I've had huge issues trying to get this working together with a Cisco C6880-X running regular IOS 15.2 (Advanced Enterprise license). Despite being a regular IOS software the Netflow configuration looks nothing at all like the IOS example, looks more like the IOS XR example, but it's different from that too.

After lot's of trial and error, asking around on IRC, google and tcpdump this is what I ended up with and it's working for me. Thought I should share it so that others will have an easier time getting this setup.

flow record ASSTAT-RECORD
 match ipv4 source address
 match ipv4 destination address
 match transport source-port
 match transport destination-port
 match interface input
 match interface output
 match flow direction
 collect routing source as
 collect routing destination as
 collect counter bytes long
 collect counter packets long
 collect timestamp sys-uptime first
 collect timestamp sys-uptime last
flow record ASSTAT-RECORD-V6
 match ipv6 source address
 match ipv6 destination address
 match transport source-port
 match transport destination-port
 match interface input
 match interface output
 match flow direction
 collect routing source as
 collect routing destination as
 collect counter bytes long
 collect counter packets long
 collect timestamp sys-uptime first
 collect timestamp sys-uptime last
flow exporter ASSTAT-EXPORT
 destination 86.107.242.83
 source Loopback0
 transport udp 9000
flow monitor ASSTAT-MONITOR
 exporter ASSTAT-EXPORT
 cache timeout inactive 5
 cache timeout active 5
 cache entries 16384
 record ASSTAT-RECORD
flow monitor ASSTAT-MONITOR-V6
 exporter ASSTAT-EXPORT
 cache timeout inactive 5
 cache timeout active 5
 cache entries 16384
 record ASSTAT-RECORD-V6
sampler flow-sampler
 mode random 1 out-of 1024
int Te5/1
 ip flow monitor ASSTAT-MONITOR sampler flow-sampler input
 ip flow monitor ASSTAT-MONITOR sampler flow-sampler output
 ipv6 flow monitor ASSTAT-MONITOR-V6 sampler flow-sampler input
 ipv6 flow monitor ASSTAT-MONITOR-V6 sampler flow-sampler output
melsom commented 6 years ago

Please give this guy a medal. I've tried to get it to work with Aggregated Netflow for hours. This config did the trick.

Should be included in the README.md.