ra and Cisco net-flow configuration
Torben Mellerup
tm at melle.dk
Sat Feb 23 07:38:32 EST 2002
Hi
Just sitting and playing around with ra for 'real-time' monitoring of
flows from a Cisco router,
Router config:
ip flow-cache timeout inactive 600
ip flow-cache timeout active 5
ip flow-export source Ethernet1
ip flow-export version 5
ip flow-export destination 192.168.240.36 3737
interface Ethernet1
ip address 192.168.240.35 255.255.255.248
no ip redirects
ip nat inside
ip route-cache flow
ra command on host 192.168.240.36:
(and of coause a lot of traffic passing the router :-))
ra -ncCP 3737
Result:
01 Jan 70 01:00:00 ip 0.0.0.0 -
0.0.0.0 0 0 0 0 INT
01 Jan 70 01:00:00 ip 0.0.0.0 -
0.0.0.0 0 0 0 0 INT
Nothing in output ?
What im i doing wrong ?
argus tools compiled on both RH6.2 and RH7.1 with latest libpcap, same
result.
Best regards
Torben Mellerup
More information about the argus
mailing list