Actually it should. If it does not, please send me offline a packet capture to 
your collector.

        - Peter


On 19.01.16 13:11, Alexei Pastuchov wrote:
>  Hi,
> does nfdump (v1.6.14) support Cisco CGN Netflows?
> (http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/xe-3s/asr1000/nat-xe-3s-asr1k-book/iadnat-hsl-vrf.html#GUID-004608B7-E2FB-4C4A-B544-5A587BD0835C)
>  
>  
> No matter of using deprecated build flag --enable-nel and running nfcapd  -T
> all,-7,-8,-9
>  
>  
> nfdump -o raw shows:
> 
> Flow Record:
> Flags = 0x46 EVENT, Unsampled
> export sysid = 1
> size = 116
> first = 1453204199 [2016-01-19 12:49:59]
> last = 1453204199 [2016-01-19 12:49:59]
> msec_first = 961
> msec_last = 961
> src addr = 100.65.72.93
> dst addr = 0.0.0.0
> src port = 0
> dst port = 0
> fwd status = 0
> tcp flags = 0x00 ......
> proto = 0 0
> (src)tos = 0
> (in)packets = 0
> (in)bytes = 0
> ip router = 172.16.31.106
> engine type = 0
> engine ID = 0
> received at = 1453204200175 [2016-01-19 12:50:00.175]
> Type 46 not implemented
> 
>  
> 
> Any advice would be greatly appreciated.
> 
> BR,
> 
> Alexei
> 
> 
> 
> ------------------------------------------------------------------------------
> Site24x7 APM Insight: Get Deep Visibility into Application Performance
> APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
> Monitor end-to-end web transactions and take corrective actions now
> Troubleshoot faster and improve end-user experience. Signup Now!
> http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140
> 
> 
> 
> _______________________________________________
> Nfdump-discuss mailing list
> Nfdump-discuss@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
> 

-- 
Be nice to your netflow data. Use NfSen and nfdump :)

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
_______________________________________________
Nfdump-discuss mailing list
Nfdump-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss

Reply via email to