次に、フローモニターの QFP 情報およびフロー方向を表示する show platform hardware qfp active interface if-name コマンドの出力例を示します。次の表に、CLI 出力のキーを示します。
設定
|
出力
|
ip flow monitor <monitor-name> input
|
IPV4_INPUT_FNF_FIRST IPV4_INPUT_FNF_FINAL
|
ip flow monitor <monitor-name> output
|
IPV4_BDI_OUTPUT_FNF_FINAL
|
ipv6 flow monitor <monitor-name> input
|
IPV6_INPUT_FNF_FIRST IPV6_INPUT_FNF_FINAL
|
ipv6 flow monitor <monitor-name> output
|
IPV6_BDI_OUTPUT_FNF_FINAL
|
Device# show run interface bd-vif2
Building configuration...
Current configuration: 227 bytes
!
interface BD-VIF2
vrf forwarding vrf1
ip flow monitor test1 input
ip flow monitor test1 output
ip address 10.11.11.11 255.255.255.0
ipv6 flow monitor test2 input
ipv6 flow monitor test2 output
ipv6 address 2001:DB8::1/32
end
Device# show platform hardware qfp active interface if-name BD-VIF 2
General interface information
Interface Name: BD-VIF2
Interface state: VALID
Platform interface handle: 20
QFP interface handle: 17
Rx uidb: 262138
Tx uidb: 262127
Channel: 0
Interface Relationships
BGPPA/QPPB interface configuration information
Ingress: BGPPA/QPPB not configured. flags: 0000
Egress: BGPPA not configured. flags: 0000
ipv4_input enabled.
ipv4_output enabled.
ipv6_input enabled.
ipv6_output enabled.
layer2_input enabled.
layer2_output enabled.
ess_ac_input enabled.
Features Bound to Interface:
2 GIC FIA state
66 PUNT INJECT DB
70 cpp_l2bd_svr
43 icmp_svr
45 ipfrag_svr
46 ipreass_svr
47 ipv6reass_svr
44 icmp6_svr
58 stile
Protocol 0 - ipv4_input
FIA handle - CP:0x55a7f59df038 DP:0x3fff1000
IPV4_INPUT_DST_LOOKUP_ISSUE (M)
IPV4_INPUT_ARL_SANITY (M)
IPV4_INPUT_SRC_LOOKUP_ISSUE
IPV4_INPUT_DST_LOOKUP_CONSUME (M)
IPV4_INPUT_SRC_LOOKUP_CONSUME
IPV4_INPUT_FOR_US_MARTIAN (M)
IPV4_INPUT_STILE_LEGACY
IPV4_INPUT_FNF_FIRST
IPV4_INPUT_LOOKUP_PROCESS (M)
IPV4_INPUT_FNF_FINAL
IPV4_INPUT_IPOPTIONS_PROCESS (M)
IPV4_INPUT_GOTO_OUTPUT_FEATURE (M)
Protocol 1 - ipv4_output
FIA handle - CP:0x55a7f59df0d8 DP:0x3ffeff00
IPV4_VFR_REFRAG (M)
IPV4_OUTPUT_SRC_LOOKUP_ISSUE
IPV4_OUTPUT_L2_REWRITE (M)
IPV4_OUTPUT_SRC_LOOKUP_CONSUME
IPV4_OUTPUT_STILE_LEGACY
IPV4_OUTPUT_FRAG (M)
IPV4_BDI_OUTPUT_FNF_FINAL.
BDI_VLAN_TAG_ATTACH_AND_LAYER2_LOOKUP_GOTO
LAYER2_BRIDGE
BDI_OUTPUT_GOTO_OUTPUT_FEATURE
IPV4_OUTPUT_DROP_POLICY (M)
DEF_IF_DROP_FIA (M)
Protocol 6 - ipv6_input
FIA handle - CP:0x55a7f59dee58 DP:0x3fff4300
IPV6_INPUT_SANITY_CHECK (M)
IPV6_INPUT_DST_LOOKUP_ISSUE (M)
IPV6_INPUT_SRC_LOOKUP_ISSUE
IPV6_INPUT_ARL (M)
IPV6_INPUT_DST_LOOKUP_CONT (M)
IPV6_INPUT_SRC_LOOKUP_CONT
IPV6_INPUT_DST_LOOKUP_CONSUME (M)
IPV6_INPUT_SRC_LOOKUP_CONSUME
IPV6_INPUT_STILE_LEGACY
IPV6_INPUT_FNF_FIRST
IPV6_INPUT_FOR_US (M)
IPV6_INPUT_LOOKUP_PROCESS (M)
IPV6_INPUT_FNF_FINAL
IPV6_INPUT_LINK_LOCAL_CHECK (M)
IPV6_INPUT_GOTO_OUTPUT_FEATURE (M)
Protocol 7 - ipv6_output
FIA handle - CP:0x55a7f59dee08 DP:0x3fff4b80
IPV6_VFR_REFRAG (M)
IPV6_OUTPUT_SRC_LOOKUP_ISSUE
IPV6_OUTPUT_SRC_LOOKUP_CONT
IPV6_OUTPUT_SRC_LOOKUP_CONSUME
IPV6_OUTPUT_L2_REWRITE (M)
IPV6_OUTPUT_STILE_LEGACY
IPV6_OUTPUT_FRAG (M)
IPV6_BDI_OUTPUT_FNF_FINAL
BDI_VLAN_TAG_ATTACH_AND_LAYER2_LOOKUP_GOTO
LAYER2_BRIDGE
BDI_OUTPUT_GOTO_OUTPUT_FEATURE
IPV6_OUTPUT_DROP_POLICY (M)
DEF_IF_DROP_FIA (M)
⋮
次に、キャッシュ出力をレコード形式で表示する show flow monitor [[name] [cache [format {csv | record | table}]] [statistics]] コマンドの出力例を示します。
Device# show flow monitor name FLOW-MONITOR-1 cache format record
Cache type: Normal
Cache size: 1000
Current entries: 4
High Watermark: 4
Flows added: 101
Flows aged: 97
- Active timeout (1800 secs) 3
- Inactive timeout (15 secs) 94
- Event aged 0
- Watermark aged 0
- Emergency aged
IPV4 DESTINATION ADDRESS:
198.51.100.1 0
ipv4 source address: 10.10.11.1
trns source port: 25
trns destination port: 25
counter bytes: 72840
counter packets: 1821
IPV4 DESTINATION ADDRESS: 198.51.100.2
ipv4 source address: 10.10.10.2
trns source port: 20
trns destination port: 20
counter bytes: 3913860
counter packets: 7326
IPV4 DESTINATION ADDRESS: 198.51.100.200
ipv4 source address: 192.168.67.6
trns source port: 0
trns destination port: 3073
counter bytes: 51072
counter packets: 1824
Device# show flow monitor name FLOW-MONITOR-2 cache format record
Cache type: Normal
Cache size: 1000
Current entries: 2
High Watermark: 3
Flows added: 95
Flows aged: 93
- Active timeout (1800 secs) 0
- Inactive timeout (15 secs) 93
- Event aged 0
- Watermark aged 0
- Emergency aged 0
IPV6 DESTINATION ADDRESS: 2001:DB8:0:ABCD::1
ipv6 source address: 2001:DB8:0:ABCD::2
trns source port: 33572
trns destination port: 23
counter bytes: 19140
counter packets: 349
IPV6 DESTINATION ADDRESS: FF02::9
ipv6 source address: 2001:DB8::A8AA:BBFF:FEBB
trns source port: 521
trns destination port: 521
counter bytes: 92
counter packets: 1
次に、インターフェイスのフローステータスを表示する show flow interface コマンドの出力例を示します。
Device# show flow interface BD-VIF2001
Interface GigabitEthernet0/0/0
FNF: monitor: FLOW-MONITOR-1
direction: Input
traffic(ip): on
FNF: monitor: FLOW-MONITOR-2
direction: Input traffic(ipv6): on
Device# show flow interface BD-VIF2002
Interface GigabitEthernet1/0/0
FNF: monitor: FLOW-MONITOR-1
direction: Output
traffic(ip): on
FNF: monitor: FLOW-MONITOR-2
direction: Input traffic(ipv6): on
次に、Flexible NetFlow 設定のフローモニターの QFP 情報およびフロー方向を表示する show platform hardware qfp active interface if-name | in FNF コマンドの出力例を示します。次の表に、CLI 出力のキーを示します。
設定
|
出力
|
ip flow monitor <monitor-name> input
|
IPV4_INPUT_FNF_FIRST IPV4_INPUT_FNF_FINAL
|
ip flow monitor <monitor-name> output
|
IPV4_BDI_OUTPUT_FNF_FINAL
|
ipv6 flow monitor <monitor-name> input
|
IPV6_INPUT_FNF_FIRST IPV6_INPUT_FNF_FINAL
|
ipv6 flow monitor <monitor-name> output
|
IPV6_BDI_OUTPUT_FNF_FINAL
|
Device# show run interface bd-vif2
Building configuration...
Current configuration : 227 bytes
!
interface BD-VIF2
vrf forwarding vrf1
ip flow monitor test1 input
ip flow monitor test1 output
ip address 10.11.11.11 255.255.255.0
ipv6 flow monitor test2 input
ipv6 flow monitor test2 output
ipv6 address 2001::8/64
end
Device# show platform hardware qfp active interface if-name BD-VIF 2 | in FNF
IPV4_INPUT_FNF_FIRST
IPV4_INPUT_FNF_FINAL
IPV4_BDI_OUTPUT_FNF_FINAL.
IPV6_INPUT_FNF_FIRST
IPV6_INPUT_FNF_FINAL
IPV6_BDI_OUTPUT_FNF_FINAL
clear flow monitor name monitor-name [cache [force-export] | force-export | statistics] コマンドを使用すると、Flexible NetFlow フローモニター、フローモニターキャッシュ、またはフローモニター統計情報がクリアされ、フローモニターキャッシュ内のデータを強制的にエクスポートできます。
Flexible NetFlow の設定の詳細については、『Flexible NetFlow Configuration Guide, Cisco IOS XE 17』を参照してください。