Netflow command and interface

Hi,
I have a few simple questions regarding netflow. Would anyone please clarify them for me?
1. I usually configured netflow with "ip route-cache flow" command. Anyway, I have seen articles mentioning "ip flow ingress" and "ip flow egress" commands. What is different exactly i.e. ip route-cache flow and ip flow ingress|egress? Which one should be used?
2. I understand netflow needs to be configured on every interface to export completely netflow data. Is it correct?
3. If there are 2 physical and 2 logical i.e. tunnel interfaces, how many/which interfaces should netflow be configured? Are only physical interfaces enough?
Please let me know if I misunderstand anything.
Thank you very much,
Nitass

AFAIK:
1. "ip route-cache flow" is deprecated starting in 12.2(18)SXD. See this URL for other IOS trains: http://www.cisco.com/en/US/docs/ios/netflow/command/reference/nf_01.html#wp1049320
2. It's generally correct, due to the unidirectional nature of NetFlow records. Otherwise, you run the risks such as only seeing one direction of a given "conversation".
3. My understanding was NetFlow cache could only be enabled on layer-3 interfaces. However, on the catalyst 6000s (and sup720?), you can get layer-2 bridged traffic between hosts in the same VLAN, using the following config:
ip flow ingress layer2-switched vlan
ip flow export layer2-switched vlan
Then, there's this recent thread that makes it sound promising that layer-2 ports could become NetFlow-enabled, though it's not clear (to me) how it works out in practice:
https://supportforums.cisco.com/message/678612#678612
So YMMV. The best bet is to actually attempt configuring it. Odds are the physical interfaces won't accept the "ip route-cache flow" or "ip flow ingress/egress" config.

Similar Messages

Netflow and interface

there are interfaces in netflow output, source interface and destination interface. but how netflow know incoming and outgoing interface.
i see some traffic has same interface for source interfce and destination interface,

AFAIK:
1. "ip route-cache flow" is deprecated starting in 12.2(18)SXD. See this URL for other IOS trains: http://www.cisco.com/en/US/docs/ios/netflow/command/reference/nf_01.html#wp1049320
2. It's generally correct, due to the unidirectional nature of NetFlow records. Otherwise, you run the risks such as only seeing one direction of a given "conversation".
3. My understanding was NetFlow cache could only be enabled on layer-3 interfaces. However, on the catalyst 6000s (and sup720?), you can get layer-2 bridged traffic between hosts in the same VLAN, using the following config:
ip flow ingress layer2-switched vlan
ip flow export layer2-switched vlan
Then, there's this recent thread that makes it sound promising that layer-2 ports could become NetFlow-enabled, though it's not clear (to me) how it works out in practice:
https://supportforums.cisco.com/message/678612#678612
So YMMV. The best bet is to actually attempt configuring it. Odds are the physical interfaces won't accept the "ip route-cache flow" or "ip flow ingress/egress" config.

Advice on constructing a test engine and formatting a spreadsheet test file to perform command line interface testing on a product through telnet or serial interface

Advice on constructing a test engine and formatting a spreadsheet test file to perform command line interface testing on a range of products through telnet or serial interface and output pass/fail results.

If I understand correctly, you want to do the following:
1. Create one or more tab-delimited files that specify a series of query strings (that LabVIEW will send to your products) and expected reply strings (that LabVIEW will look for in response to each query)
2. Run your LabVIEW program (the test engine) and have it execute one or more test scripts from file using either TCP/IP or serial communication to your units under test
3. Track how many of the queries are met with the expected response, and output an indication of whether each step passed or failed
If this is close to correct, then I've attached a sample test file and LabVIEW VI as an example; I chose the TCP/telnet method because it allowed me to use the ni.com Web site to simulate my tes
t hardware. If you happen to own the LabVIEW Internet Toolkit, there's a VI called "Telnet Play Script" in the Telnet palette that does something fairly similar using TCP. The same general model would also work for Serial communications.
Hope it helps,
John Lum
Attachments:
test_engine.zip ‏24 KB

Advice on constructing a test engine and formatting a spreadsheet test file to perform command line interface testing on a product through telnet or serial interface

Advice on constructing a test engine and formatting a spreadsheet test file to perform command line interface testing on a range of products through telnet or serial interface and output pass/fail results.

Hello j. smith,
TestStand gives you the ability to create "sequence files" which are lists of tests to be run sequentially or in parallel. These tests can be written in any language: LabVIEW VIs, C/C++ DLLs, EXEs, ActiveX objects, .NET Assemblies, etc.
You can run your TestStand sequence files from a command-line prompt using the following syntax:
\bin\SeqEdit.exe" /quit -run
This will launch the TestStand Sequence Editor (and optionally prompt you for TestStand login information if you have this configured), run your sequence file, then exit.
If you're using the TestStand process model, it can output your results to a report file or database if you configure this. To use a TestStand process mo
del to execute your sequence file, use the following syntax:
\bin\SeqEdit.exe" /quit -runEntryPoint
Here's an example:
C:\>"C:\Program Files\National Instruments\TestStand 3.0\bin\SeqEdit.exe" /quit -runEntryPoint "Single Pass" "C:\Program Files\National Instruments\TestStand 3.0\Examples\Demo\C\computer.seq"
Note that multiple sequences and sequence files can be specified on the command line.
TestStand supports remote sequence execution using DCOM (Distributed COM), which is an east way to remotely execute tests. But as for running tests or commands through a telnet or serial interface, you would have need to check Windows documentation on how to execute command-line remotely like this.
David Mc.
NI Applications Engineer

Grant and revoke privilages from command line interface

hi all,
I have a lot of users that I need to give them a set of privileges to folders and containers of the repository, i thought that using the command line interface should help in loading a script.
i checked the manual for the syntax for such a command (i.e. to grant privileges) but i couldn't, searched the net and i didn't find anything.
So can we grant privileges from the command line interface and how ?
by the way is there anyway to create users from command line interface as well ?\
thanks in advance and have a good one

The granting of access rights cannot be done with a CLI script in Designer. Instead you have to use the Designer API Pl/Sql packages.
For detailed information, refer to the "API and Model Reference Guide", which is
installed with the Designer Repository Documentation, or can be found on OTN > Doco > Designer site.
Scroll through that document to the Reference section. You will need to read up on two topics at least: Workarea and Container Context, Privileges and Access Rights.
To grant rights, the easiest way is to grant them "just like some existing ones".
To do this, you'll need a Pl/Sql procedure with 5 input parameters:
1) the workarea context
2) the container to look at
3) the user to look like
4) the container to grant access to
5) the user to grant access for
The Pl/Sql procedure then needs to make a series of Repository API package calls to set context and get container IRIDs:
JR_CONTEXT.Set_Workarea (workareaname) - to set the context workarea
JR_CONTEXT.Set_Working_Folder (sourcefoldername) - to specify the source container
JR_CONTEXT.Working_Folder (sourcefolderid) - to get the ID of the source container
JR_CONTEXT.Set_Working_Folder (targetfoldername) - to specify the target container
JR_CONTEXT.Working_Folder (targetfolderid) - to get the ID of the target container
OR you can just do a couple queries after you set the WA CONTEXT such as ...
Select IRID from CI_Application_Systems where NAME = <sourcefoldername>
Select IRID from CI_Application_Systems where NAME = <targetfoldername>
Then you get the list of rights desired, and grant them back to the target user.
JR_ACC_RIGHTS.Get_Acc_Rights (sourcefolderid, sourceusername) > AccessList
[gets list of existing rights for some user on a container]
JR_ACC_RIGHTS.Grant_Priv_List (targetfolderid, targetusername, AccessList, Cascade? = TRUE)
[to set the list of rights for a user against the target container and its subcontainers]
There are other ACC_RIGHTS packages, like Grant_Priv, Revoke_Prive, Revoke_Priv_List, etc that you can use as well to build up a set of access management scripts.
Hope this helps

NetFlow on All Interfaces

Hi All,
We are using ManageEngine NetFlow Analyzer to monitor our network traffic.
We have a few VLAN interfaces on the switch where we have enabled flow-export ingress and egress. We can see traffic that is passing between the VLANs on which flow-export has been configured. However, we have on interface that is connected to remote locations. We have not enabled flow-export on this interface. The idea was that, we have enabled ingress and egress flow-export, and the remote locations connect to VLANs where flow-export is already enabled, we must get all traffic from there. But we cannot see traffic from the remote locations, but we can see traffic from inside network to remote locations.
After checking ManageEngine documentation, I see that we have to enable netflow on all interfaces to get accurate report. Can anyone let me know why this is required. We already have ingress and egress flow-export, and we must be getting all traffic. Please suggest.
Thanks in advance,
Faiz

Hello Faiz,
As you probably know, NetFlow by default is only collected ingress. The ingress flows collected on all interfaces are used to display the outbound traffic on a selected interface. I don't know about ManageEngine but, in some NetFlow solutions, interfaces without NetFlow/IPFIX enabled will not be displayed regardless of whethor or not flows are going out of it.
Regarding ingress/egress being enabled on the same interface. If you are using flexible NetFlow to configure the export, make sure the "flow direction" is exported in the template. The commands to export both look like this:
ip flow monitor andrew-mon input
ip flow monitor andrew-mon output
Here is a good article on enabling ingress and egress NetFlow. Realize that just because you export both ingress and egress on a single interface and you export the direction, this doesn't mean the NetFlow solution will report on the data with a behavior that you would expect.
Ingress and egress flows are exported at the same time with only one difference "flow direction". For this reason, this element must be included in the template to ensure that utilization isn't overstated in the flow report. Again, this of course depends on your reporting solution.
Many vendors can't deal with a mixture of ingress and egress flows being enabled in a seemingly random fashion on the same device. In other words, they expect all ingress or all egress. Only a few vendors can handle a hybrid approach.
I hope this helps.
Jake

ASR 1006 with IOS 3.13.1S, NetFlow commands not working

Hi,
We have Cisco ASR1006 router with IOS asr1000rp1-advipservicesk9.03.13.01.S.154-3.S1-ext.bin, we have recently upgrade IOS from asr1000rp1-advipservicesk9.02.03.02.122-33.XNC2.bin.
After upgrading the IOS ip flow ingress and ip flow egress command is not working.
Please suggest on configuring NetFlow commands on this.
Regards
MAC

Also try this link, found if you follow the URL above, and I have made some notes about configuring inbound and outbound flow monitoring :-
http://docwiki.cisco.com/wiki/Migrating_from_Traditional_to_Flexible_NetFlow#Flexible_NetFlow_Migration_in_Practice
That article was referred in these release notes but don’t follow the link in the release notes, use the link above as it seems to have moved;
http://www.cisco.com/c/en/us/td/docs/routers/asr1000/release/notes/asr1k_rn_rel_notes/asr1k_feats_important_notes_313s.html#pgfId-3455900
The syntax I have used is almost the same, except that I don’t think you can quite have the 2 options they mention in the last line;
flow exporter FlowExporter1
destination 192.168.9.101
transport udp 9996
export-protocol netflow-v5
source FastEthernet 0/1
flow monitor FlowMonitor1
record netflow ipv4 original-input
exporter FlowExporter1
cache timeout active 1
cache timeout inactive 15
interface FastEthernet 0/1
ip flow monitor FlowMonitor1 [input|output] <<< with the netflow record above only input is ok
According to the command reference I looked at when you use the ipv4 ‘netflow’ flow record with ‘original-input’, it can only monitor inbound packets and vice-versa for ‘original-output’, therefore I think you need the pair of settings as we have done.
[see here http://www.cisco.com/c/en/us/td/docs/ios/fnetflow/configuration/guide/12_2sr/fnf_12_2_sr_book/get_start_cfg_fnflow.html#wp1059480 ]
flow monitor FlowMonitor1
record netflow ipv4 original-input
flow monitor FlowMonitor2
record netflow ipv4 original-output
interface FastEthernet 0/1
ip flow monitor FlowMonitor1 input
ip flow monitor FlowMonitor2 output
Rgds
Ian

How do I create a "command-line-interface" for a game?

Hey people,
For a game I need to make a DOS-like command-line-interface where the user has at least 3 options to answer with, does anyone know how to go about this?
Hope someone here can help me out!
Kind regards,
Angela

I'm not sure what part of this you are having difficulty with. Imagine for a moment that instead of asking for your end user to type something into a text-entry field and to monitor what they type (perhaps when the ENTER key is pressed), that instead you provide 3 buttons on your stage. Responding to a button press in this scenario is much the same as responding to typed user input - your movie does something based on user interaction. Going back to the user entered text scenario, a text or field sprite can detect the ENTER key being pressed and examine the string the user has entered, something like:
on keyDown me
if _key.keyCode = 36 then
    stopEvent
    sText = sprite(me.spriteNum).member.text
    case sText of
      "hack": -- do whatever you need to here
      "research":
      "wait":
      otherwise:
    end case
else
    pass
end if
end

Oracle VM Manager Command Line Interface

Can anybody suggest any tool for Oracle VM Manager Command Line Interface?
Are they free?
What kind of jobs we can automate using Command line?
If they are not free is it worth spending money to buy them?

Try public-yum.oracle.com
and look at the oracle-addons channel below OEL.
http://public-yum.oracle.com/repo/EnterpriseLinux/EL5/oracle_addons/i386/
Regards
Sebastian

-info XML format for Compressor's command line interface?

Hi Everyone,
I've got a brand new copy of Final Cut Studio HD that I'm using for an encoding project. I'm trying to figure out how to use Compressor's command line interface. I want to give it a MPEG-2 file and a .scc (closed caption) file. I can see how to specify the source file, but I'm having trouble figuring out how to specify the SCC file. As best as I can understand, I'm going to need to use the -info <XML> option, but I haven't found any documentation for this. Can someone point me to the appropriate documentation?
Thanks!
- Kevin

I get an error when I do exactly what you suggested. My problem is not if the XSU is able to locate the xml file because I know it is able to parse it since it picks up an error in it such as if I make the "ROW" element "row" - ie small caps instead of big which is not recognised by XSU. I use the url of the xml file as specified when I open the xml file in internet explorer. The XSU does confirm it inserts the document successfully with my original command but the document simply doesn't get inserted into the table. Specifically, if anyone is to insert the xml file I have shown in Oracle, how would it be approached successfully?
Your help is very much appreciated.

User-command and pf-status

Hi can anybody please give tell me what is the user-command and what is pf-status.
please provide me a sample code how to create these step by step.
and how to copy standard pf-status to user defined one.
thanks in advance
kp

hi,
The Standard List Status
As with normal screens, you can define your own GUI status for lists and attach it to a list level using the SET PF-STATUS statement. If you do not set a particular GUI status, the system sets a default list status for the list screen in an executable program. In other programs, for example, when you call a list from screen processing, you must set this status explicitly using the statement
SET PF-STATUS space.
This default interface always contains at least the functions described in the Standard List section.
Unlike normal dialog statuses, the default list status is affected by the ABAP program.
If you define event blocks in your program using the event keywords AT LINE-SELECTION or AT PF]
This statement sets the status parameters. To display an ampersand character &, repeat it in the title &&.
Examples
Example for dialog status in a list.
REPORT demo_list_menu_painter.
START-OF-SELECTION.
SET PF-STATUS 'TEST'.
WRITE: 'Basic list, SY-LSIND =', sy-lsind.
AT LINE-SELECTION.
WRITE: 'LINE-SELECTION, SY-LSIND =', sy-lsind.
AT USER-COMMAND.
CASE sy-ucomm.
    WHEN 'TEST'.
      WRITE: 'TEST, SY-LSIND =', sy-lsind.
ENDCASE.
This program uses a status TEST, defined in the Menu Painter.
Function key F5 has the function code TEST and the text Test for demo.
Function code TEST is entered in the List menu.
The function codes PICK and TEST are assigned to pushbuttons.
The user can trigger the AT USER-COMMAND event either by pressing F5 , or by choosing List ® Test for demo, or by choosing the pushbutton Test for demo.The user can trigger the AT LINE-SELECTION event by selecting a line.
Example of setting a dialog status for the current list
REPORT demo_list_set_pf_status_1.
DATA: fcode TYPE TABLE OF sy-ucomm,
      wa_fcode TYPE sy-ucomm.
START-OF-SELECTION.
wa_fcode = 'FC1 '. APPEND wa_fcode TO fcode.
wa_fcode = 'FC2 '. APPEND wa_fcode TO fcode.
wa_fcode = 'FC3 '. APPEND wa_fcode TO fcode.
wa_fcode = 'FC4 '. APPEND wa_fcode TO fcode.
wa_fcode = 'FC5 '. APPEND wa_fcode TO fcode.
wa_fcode = 'PICK'. APPEND wa_fcode TO fcode.
SET PF-STATUS 'TEST'.
WRITE: 'PF-Status:', sy-pfkey.
AT LINE-SELECTION.
IF sy-lsind = 20.
    SET PF-STATUS 'TEST' EXCLUDING fcode.
ENDIF.
WRITE: 'Line-Selection, SY-LSIND:', sy-lsind,
       / '                SY-PFKEY:', sy-pfkey.
AT USER-COMMAND.
IF sy-lsind = 20.
      SET PF-STATUS 'TEST' EXCLUDING fcode.
    ENDIF.
    WRITE: 'User-Command, SY-LSIND:', sy-lsind,
         / '              SY-UCOMM:', sy-ucomm,
         / '              SY-PFKEY:', sy-pfkey.
Suppose that the function codes FC1 to FC5 are defined in the status TEST and assigned to pushbuttons: The function code PICK is assigned to function key F2 .
When the program starts, the user can create detail lists by selecting a line or choosing one of the function codes FC1 to FC5. For all secondary lists up to level 20, the user interface TEST is the same as for the basic list:
On list level 20, EXCLUDING ITAB deactivates all function codes that create detail lists. This prevents the user from causing a program termination by trying to create detail list number 21.
Example of setting a dialog status for the current list
REPORT demo_list_set_pf_status_2.
START-OF-SELECTION.
WRITE: 'SY-LSIND:', sy-lsind.
AT LINE-SELECTION.
SET PF-STATUS 'TEST' IMMEDIATELY.
After executing the program, the output screen shows the basic list and the user interface predefined for line selection (with function code PICK).
When you choose Choose, the user interface changes. However, since the AT LINE-SELECTION processing block does not contain an output statement, the system does not create a detail list: The status TEST is defined as in the previous example.
Example: Titles of detail lists.
REPORT demo_list_title .
START-OF-SELECTION.
WRITE 'Click me!' HOTSPOT COLOR 5 INVERSE ON.
AT LINE-SELECTION.
SET TITLEBAR 'TIT' WITH sy-lsind.
WRITE 'Click again!' HOTSPOT COLOR 5 INVERSE ON.
Regards,
Sreevani.

Command Line Interface

Hi all,
I am trying to write a program with a command line interface and I am running into a few problems.
I read the commands issued by the user as :
BufferedReader in = new BufferedReader(
new InputStreamReader(System.in));
String command = in.readLine();Question 1. Is this the right way?
Question 2. I have to read a password from a user. How do I stop the echo of this password (or change the echo to something like *)? Is it possible to do that from a Java program?
Question3. While the user is typing a command, the system wants to output a message. This jumbles up the echo of the command the user was typing. So I need to show the message from the system on a new line, and then again show the command the user was typing .. or something similar which keeps the whole thing neat. How do I do it?
Some of these requirements might not be possible to implement because of the inherent limitation of the command line interface. :-)
Please help me with this.
Thanks,
Binil

I raised this issue also in another thread.
Actually I am pretty p.o. This issue pops up over and over again but the people at Sun systematically deny the problem and simply do nothing about it. I know, it's not as interseting as EE, 3D graphics or Swing, but it is asked for by many peaople over and over again.
I simply don't understand what is so difficult in the method:
System.in.setEcho(boolean) or System.in.setEcho(char)
Your solution will work, but it is not platform-idependent. That os what Java is all about or am I wrong?
hi,
yah thatz the correct way to read things typed
typed in the command prompt. Am not sure whether you
will be able to mask the character typed to show a *
(but i supoose itz not possible). If you are going
to do any CLI have a look at JNICurses library
available at
http://home.att.net/~psantoro/jnicurses/jnicurses.html
hope that was useful.
cheerz
ynkrish

Wht's the Diff bet AT-USER command and AT-PF STATUS

Can Anybody explain me the diffarence between At user command and At-pf status.
Thanks,
Srik

Hi Srikanth,
AT USER-COMMAND - Event in interactive reporting
This event is executed whenever the user presses a function key in the list or makes an entry in the command field .
Some functions are executed directly by the system and thus cannot be processed by programs. These include:
PICK See variant AT LINE-SELECTION PFn See variant AT PFn /... System command %... System command PRI Print BACK Back RW Cancel P... Scroll function (e.g.: P+ , P- , PP+3 , PS-- etc.)
Instead of this functions, you can use the SCROLL statement in programs.
Since many of these system functions begin with "P", you should avoid using this letter to start your own function codes.
Otherwise, the effect is as for AT LINE-SELECTION ; also, the current function code is stored in the system field SY-UCOMM .
Example
DATA: NUMBER1 TYPE I VALUE 20,
      NUMBER2 TYPE I VALUE 5,
      RESULT TYPE I.
START-OF-SELECTION.
WRITE: / NUMBER1, '?', NUMBER2.
AT USER-COMMAND.
CASE SY-UCOMM.
    WHEN 'ADD'.
      RESULT = NUMBER1 + NUMBER2.
    WHEN 'SUBT'.
      RESULT = NUMBER1 - NUMBER2.
    WHEN 'MULT'.
      RESULT = NUMBER1 * NUMBER2.
    WHEN 'DIVI'.
      RESULT = NUMBER1 / NUMBER2.
    WHEN OTHERS.
      WRITE 'Unknown function code'.
      EXIT.
ENDCASE.
WRITE: / 'Result:', RESULT.
After entry of a function code, the appropriate processing is performed under the event AT USER-COMMAND and the result is displayed in the details list.
AT PFn - Event in interactive reporting
Here, n stands for a numeric value between 0 and 99.
This event is executed whenever the user presses a function key that contains the function code PFn in the interface definition. The default status for lists contains some of these functions.
Otherwise, the effect is as for the variant AT LINE-SELECTION . The cursor can be on any line.
To ensure that the chosen function is executed only for valid lines, you can check the current HIDE information. This variant should be used only for test or prototyping purposes, since the default status is not normally used. Instead, you should set a program-specific status with SET PF-STATUS . This should not contain any function codes beginning with " PF ".
Example
DATA NUMBER LIKE SY-INDEX.
START-OF-SELECTION.
DO 9 TIMES.
    WRITE: / 'Row', (2) SY-INDEX.
    NUMBER = SY-INDEX.
    HIDE NUMBER.
ENDDO.
AT PF8.
CHECK NOT NUMBER IS INITIAL.
WRITE: / 'Cursor was in row', (2) NUMBER.
CLEAR NUMBER.

Command line interface to Crystal? Batch job to refresh report data?

Hi All.
I have some users who do certain work and then want to print an updated report. However they only have the report viewer. As they work at night, they can't ask me to refresh the report.
Is there a facility to schedule jobs like this in Crystal?
Is there a way to create a batch job that will automatically refresh the report?
Is there a command line interface to Crystal?
Has anyone got a suggestion for some other means of solving my problem?
Thanks.

are you using crystal enterprise as your portal? that has a scheduler.

Command line interface to "code cache" memory pool utilization

I need to monitor the usage of the "code cache" memory pool through a command-line interface, but it doesn't seem to me that the jstat tool is able to give me any information about this particular memory pool. Are there any other tools that is able to give me the details I need? I'm using both JDK 5 and 6.
Edited by: normann1974 on Jul 10, 2008 9:40 AM

Typically, this is a class path Problem when the JVM is unable to locate a
class. Are you sure that the class listed as missing below is included in
your class path?
Michael Girdley, BEA Systems Inc
Learning WebLogic? Buy the book.
http://www.learnweblogic.com/
"Pascal Guillot" <[email protected]> wrote in message
news:3a5df1ee$[email protected]..
>
I seem to be running into dificulties when attempting to use theweblogic.Admin class for any commands from the command line
I am running from a Solaris 5.7 box, and java version 1.1.6, and weblogic6.0 server is running in the background
Anytime I attempt to run the class:
java weblogic.Admin <commandofsort> (followed by any neccessary args) Iget the following error msg:
>
java.lang.NoClassDefFoundError: javax/management/AttributeList
at weblogic.management.commandline.CommandLineArgs.<init>(CompiledCode)
at weblogic.Admin.main(Compiled Code)
(I can successfuly invoke most of the utililities in the utils classhowever)
>
any ideas?
Pascal

Netflow command and interface

Similar Messages

Maybe you are looking for