ra and Cisco net-flow configuration

Torben Mellerup tm at melle.dk
Sat Feb 23 07:38:32 EST 2002


Hi 

Just sitting and playing around with ra for 'real-time' monitoring of
flows from a Cisco router, 

Router config:

ip flow-cache timeout inactive 600
ip flow-cache timeout active 5
ip flow-export source Ethernet1
ip flow-export version 5
ip flow-export destination 192.168.240.36 3737

interface Ethernet1
 ip address 192.168.240.35 255.255.255.248
 no ip redirects
 ip nat inside
 ip route-cache flow

ra command on host 192.168.240.36:

(and of coause a lot of traffic passing the router :-))

ra -ncCP 3737

Result:

01 Jan 70 01:00:00     ip         0.0.0.0        -           
0.0.0.0       0        0         0            0           INT
01 Jan 70 01:00:00     ip         0.0.0.0        -           
0.0.0.0       0        0         0            0           INT

Nothing in output ?


What im i doing wrong ?

argus tools compiled on both RH6.2 and RH7.1 with latest libpcap, same
result.

Best regards
Torben Mellerup



More information about the argus mailing list