Cisco 2620 на всех интерфейсах стоит ip route-cache flow
!
ip flow-export source FastEthernet0/0.1
ip flow-export version 5
ip flow-export destination 10.121.1.1 6666
!
Поставил flow-tools на FreeBSD запустил
flow-capture -S 15 -N -1 -w /var/log/netflow 0/0/6666

все вроде работает но в логах пишет lost=240 и тд

flow-capture[9803]: STAT: now=1095236100 startup=1095224547 src_ip=10.121.1.254 dst_ip=10.121.1.1 d_ver=5 pkts=1643 flows=44585 lost=498 reset=0 filter_drops=0
flow-capture[9803]: STAT: now=1095237000 startup=1095224547 src_ip=10.121.1.254 dst_ip=10.121.1.1 d_ver=5 pkts=1754 flows=47754 lost=498 reset=0 filter_drops=0
flow-capture[9803]: ftpdu_seq_check(): src_ip=10.121.1.254 dst_ip=10.121.1.1 d_version=5 expecting=529127 received=529157 lost=30
flow-capture[9803]: STAT: now=1095237900 startup=1095224547 src_ip=10.121.1.254 dst_ip=10.121.1.1 d_ver=5 pkts=1998 flows=55009 lost=528 reset=0 filter_drops=0

Включил на кошке debug ip flow export

Sep 15 19:06:41 R0 523: Sep 15 19:06:40: IPFLOW: Sending export pak to 10.121.1.1 port 6666
Sep 15 19:06:50 R0 524: Sep 15 19:06:49: IPFLOW: Sending export pak to 10.121.1.1 port 6666
Sep 15 19:06:50 R0 525: Sep 15 19:06:49: IPFLOW: Error sending export packet: Enqueued to process level
Sep 15 19:07:00 Spider flow-capture[9803]: ftpdu_seq_check(): src_ip=10.121.1.254 dst_ip=10.121.1.1 d_version=5 expecting=554674 received=554704 lost=30
Sep 15 19:07:01 R0 526: Sep 15 19:07:00: IPFLOW: Sending export pak to 10.121.1.1 port 6666
Sep 15 19:07:13 R0 527: Sep 15 19:07:12: IPFLOW: Sending export pak to 10.121.1.1 port 6666

И еще просматривая статистику получается картина что все UDP пакеты идут на Destination Interface = 0
Почему?

• Борьба с Netflow, sh_, 13:41 , 16-Сен-04, (1)