Caligare NetFlow - Knowledgebase
Search:     Advanced search
Browse by category:
Glossary | Contact Us

When I run show ip flow top-talkers I see null destination interface. What does null interface mean?

Add comment
Views: 5878
Votes: 0
Comments: 0
Output interfaces are "Null" in the following cases:
  1. The packets are blocked by an ACL.
  2. The packets are process switcheded. This could be because the feature is not supported
    by CEF or fast switching. Do a "show int stats" to distinguish between data being process switched instead of cef/fast switched. Also, check "show cef interface" and "show ip interface" to check if CEF is disabled or packets are being punted/dropped due to an unsupported feature configured.
  3. Multicast traffic.
  4. Packets destined for the router.
  5. Tunnels (IPIP, GRE, IPSEC, L2TP) & WCCP.
  6. Static route to null0 - e.g. ip route 10.1.0.0 255.255.0.0 Null0
  7. Dropped by QoS.

     




Others in this Category
document NetFlow on a Cisco 4500 series. Do I need a NetFlow services card?
document Is it possible to use the vrf interface as source of netflow packets?
document Can I use a bridged IP traffic NetFlow on PFC3A?
document Is NetFlow version 9 supported on 3620? Where can I find the document to see the supported devices?
document Cisco ASA and NetFlow
document What is netflow table capacity on Cisco?
document What means "TCAM Utilization" and "ICAM Utilization"?
document EARL NetFlow error messages
document I have interface Vlan2 with record ip route-cache flow, but I have never seen traffic of this interface, although, other VLAN interfaces present in statistics.
document How can I configure netflow on Cisco?
document I would like to get NetFlow information from individual layer 2 switch ports.
document "Unable to change flowmask" error message on Cisco 6500
document How can I enable netflow on Cisco 3550 or Cisco 3750 devices?
document What is diference between normal, fast and long mls aging?
document What is difference between "ip flow ingress" and "ip route-cache flow"?
» More articles



RSS