The following command outputs are examples only; actual displays may differ depending on supported functionality and user configuration.
This command displays administrative and operational status of data collector configuration.
cflowd Collector Output —The following output is an example of cflowd Collector information, and Table 83 describes the output fields.
Label | Description |
Host Address | The IP address of a remote Cflowd collector host to receive the exported Cflowd data. |
Port | The UDP port number on the remote Cflowd collector host to receive the exported Cflowd data. |
AS Type | The style of AS reporting used in the exported flow data. |
origin Reflects the endpoints of the AS path which the flow is following. | |
peer Reflects the AS of the previous and next hops for the flow. | |
Version | Specifies the configured version for the associated collector. |
Admin | The desired administrative state for this Cflowd remote collector host. |
Oper | The current operational status of this Cflowd remote collector host. |
Recs Sent | The number of Cflowd records that have been transmitted to this remote collector host. |
Collectors | The total number of collectors using this IP address. |
cflowd Collector Detail Output —The following output is an example of cflowd Collector information, and Table 84 describes the output fields.
Label | Description |
Address | The IP address of a remote Cflowd collector host to receive the exported Cflowd data. |
Port | The UDP port number on the remote Cflowd collector host to receive the exported Cflowd data. |
Description | A user-provided descriptive string for this Cflowd remote collector host. |
Version | The version of the flow data sent to the collector. |
AS Type | The style of AS reporting used in the exported flow data. |
origin Reflects the endpoints of the AS path which the flow is following. | |
peer Reflects the AS of the previous and next hops for the flow. | |
Admin State | The desired administrative state for this Cflowd remote collector host. |
Oper State | The current operational status of this Cflowd remote collector host. |
Records Sent | The number of Cflowd records that have been transmitted to this remote collector host. |
Last Changed | The time when this row entry was last changed. |
Last Pkt Sent | The time when the last Cflowd packet was sent to this remote collector host. |
Aggregation Type | The bit mask which specifies the aggregation scheme(s) used to aggregate multiple individual flows into an aggregated flow for export to this remote host collector. |
none No data will be exported for this remote collector host. | |
raw Flow data is exported without aggregation in version 5 format. | |
All other aggregation types use version 8 format to export the flow data to this remote host collector. | |
Collectors | The total number of collectors using this IP address. |
Sent | The number of packets with flow date sent to the associated collector. |
Open | This counter shows the number of partially filled packets which have some flow data but are not yet filled or have been timed out (60 seconds maximum). |
Error | This counter increments when there was an error during exporting of the collector packet. The most common reason will be a UDP unreachable destination for the configured collector. |
Displays the administrative and operational status of the interfaces with cflowd enabled.
The following output is an example of Cflowd interface information, and Table 85 describes the output fields.
Label | Description |
Interface | Displays the physical port identifier. |
IPv4 Address | Displays the primary IPv4 address for the associated IP interface. |
IPv6 Address | Displays the primary IPv6 address for the associated IP interface. |
Router | Displays the virtual router index (Base = 0). |
IF Index | Displays the Global IP interface index. |
Mode | Displays the Cflowd sampling type and direction. intf — Interface based sampling acl — ACL based sampling ingr — Ingress sampling egr — Egress sampling both — Both ingress and egress sampling |
Admin | Displays the administrative state of the interface. |
Opr-IPv4 | Displays the operational state for IPv4 sampling. |
Opr-IPv6 | Displays the operational state for IPv6 sampling. |
This command displays basic information regarding the administrative and operational status of Cflowd.
The following output is an example of Cflowd status information, and Table 86 describes the output fields.
Label | Description |
Cflowd Admin Status | The desired administrative state for this Cflowd remote collector host. |
Cflowd Oper Status | The current operational status of this Cflowd remote collector host. |
Active Timeout | The maximum amount of time, in minutes, before an active flow will be exported. If an individual flow is active for this amount of time, the flow is exported and a new flow is created. |
Inactive Timeout | Inactive timeout in seconds. |
Template Retransmit | The time in seconds before template definitions are sent. |
Cache Size | The maximum number of active flows to be maintained in the flow cache table. |
Overflow | The percentage number of flows to be flushed when the flow cache size has been exceeded. |
Sample Rate | The rate at which traffic is sampled and forwarded for Cflowd analysis. one (1) All packets are analyzed. 1000 (default) Every 1000th packet is analyzed. |
Active Flows | The current number of active flows being collected. |
Total Pkts Rcvd | The total number of packets sampled and forwarded for Cflowd analysis. |
Total Pkts Dropped | The total number of packets dropped. |
Aggregation Info: | |
Type | The type of data to be aggregated and to the collector. |
Status | enabled Specifies that the aggregation type is enabled. |
disabled Specifies that the aggregation type is disabled. | |
Sent | The number of packets with flow date sent to the associated collector. |
Open | This counter shows the number of partially filled packets which have some flow data but are not yet filled or have been timed out (60 seconds maximum). |
Error | This counter increments when there was an error during exporting of the collector packet. The most common reason will be a UDP unreachable destination for the configured collector. |
Overflow events | The number of times the active cache overflowed. |
Dropped Flows | Total number of flows dropped due to cache overflow events. |
The following command outputs are examples only; actual displays may differ depending on supported functionality and user configuration.
This command displays the contents of the Cflowd active cache. This information can be displayed either in raw form where every flow entry is displayed or in an aggregated form.
Table 87 describes the Cflowd cache output fields.
Label | Description |
Proto/Protocol | Displays the IPv4 or IPv6 protocol type. |
Source Address/Src-IP | Displays the source IP address of the flow (IPv4 or IPv6). |
Destination Address/Dst-IP | Displays the destination IP address of the flow (IPv4 or IPv6). |
Intf/Ingr | Displays the ingress interface associated with the sampled flow (only displayed with the raw (all) output). |
Intf/Egr | Displays the egress interface associated with the sampled flow (only displayed with the raw (all) output). |
S-Port | Displays the source protocol port number. |
D-Port | Displays the destination protocol port number. |
Pkt-Cnt | Displays the total number of packets sampled for the associated flow. |
Byte-Cnt | Displays the total number of bytes of traffic sampled for the associated flow. |
Start-Time | Displays the system time when the first packet was sampled for the associated flow. |
Flags | Displays the IP flag value from the sampled IP flow header (only displayed with the raw (all) output). |
ToS | Displays the ToS byte values from the sampled IP flow header (only displayed with the raw (all) output). |
(Src) Mask | Displays the IP route mask for the route to the flow source IP address associated with the flow (only displayed with the raw (all) output). |
(Dst) Mask | Displays the IP route mask for the route to the flow destination IP address associated with the flow (only displayed with the raw (all) output). |
(Src) AS | Displays the ASN associated with the route to the flow source IP address associated with the flow (only displayed with the raw (all) output). |
(Dst) AS | Displays the ASN associated with the route to the flow destination IP address associated with the flow (only displayed with the raw (all) output). |
vRtr-ID | Displays the Virtual Router ID associated with the reported IP flow (only displayed with the raw (all) output). |
src-dst-proto — Aggregates the active flow cache based on the source and destination IP address and the IP protocol value.
src-dst-proto-port — Aggregates the active flow cache based on the source and destination IP address, IP protocol value, and the source and destination port numbers.
ipv4 — Displays the IPv4 flow data.
ipv6 — Displays the IPv6 flow data.
This command displays packet size distribution for sampled IP traffic. Values are displays in decimal format (1.0 = 100%, .500 = 50%). Separate statistics are maintained and shown for IPv4 and IPv6 traffic.
The following output is an example of Cflowd packet size information.
This command displays the top 20 (highest traffic volume) flows for IPv4, IPv6 or MPLS traffic types collected since the cflowd top-flow table was last cleared or initialized.
The following output is an example of Cflowd top flow information, and Table 88 describes the output fields.
Label | Description |
Ingress | Displays the ingress interface ID. |
Src IP | Displays the source IP address of the flow (IPv4 or IPv6). |
Egress | Displays the egress interface ID. |
Dest IP | Displays the destination IP address of the flow (IPv4 or IPv6). |
Pr Proto | Displays the protocol type for flow. |
TOS | Displays the Type of Service/DSCP buts filed markings. |
Flgs | Displays the protocol flag markings. |
Pkts | Displays the total number of packets sampled for this flow (since stats were last cleared). |
vRtr-ID | Displays the vRouter context the flow was sample in. |
S-Port Src Port | Displays the source protocol port number. |
Msk | Displays the route prefix length for route to source IP address. |
AS | Displays the Autonomous Systems number for the source route (the AS is either originating AS or peer AS depending on Cflowd configuration). |
D-Port Dst Port | Displays the destination protocol port number. |
Msk | Displays the route prefix length for route to destination IP address (Forwarding route). |
AS | Displays the Autonomous Systems number for the destination route (the AS is either originating AS or peer AS depending on Cflowd configuration) |
Nexthop | Displays the next-hop address used to forward traffic associated with the flow. |
Avg pkt size | Displays the average packet size of a sampled traffic associated with this flow (total number of packets sampled / total number of packets sampled). |
Active | Displays the number of seconds the flow has been active. |
This command displays the summary information for the top 20 protocol traffic seen in the Cflowd cache. All statistics are calculated based on the data collected since the last clearing of the cflowd stats with clear keyword for this command.
If the clear optional keyword is given, then the top-flows are displayed, and then this cache is cleared.
The following output is an example of Clfowd top protocol traffic information, and Table 89 describes the output fields.
Label | Description |
Protocol ID | Displays the IPv4 or IPv6 protocol type. This will either print the well known protocol name or the decimal protocol number. |
Total Flows | Displays the total number of flows recorded since the last clearing of Cflowd statistics with this protocol type. |
Flows/Sec | Displays the average number of flows detected for the associated protocol type. (Total flows / number of seconds since last clear) |
Packets/Flow | Displays the average number of packets per flow. (Total number of packets / total flows) |
Bytes/Pkts | Displays the average number of bytes per packet for the associated protocol type. (Total number of bytes for the associated protocol / total number of packets seen for the associated protocol) |
Packets/Sec | Displays the average number of packets seen for the associated protocol type. (Number of packets / time since last clear) |
Duration/Flow | Displays the average lifetime of a flow for the associated protocol type. (Number of seconds since last clear / total flows) |
Bandwidth Total (%) | Displays the percentage of bandwidth consumed by the associated protocol type. (Total protocol bytes / total bytes of all flows) |
Clears the raw and aggregation flow caches which are sending flow data to the configured collectors. This action will trigger all the flows to be discarded. The cache restarts flow data collection from a fresh state. This command also clears global stats collector stats listed in the cflowd show commands.