Network Management

Cisco 4500 series switches show incorrect Netflow data

A bug found with Cisco 4500 series switches using Flexible Netflow when using IOS 15.2(2.1) or IOS XE 3.6(0). The bug causes Netflow cached data counter not to clear out after the flow data has been sent out. This can happen with random conversations and will not always be the same. Devices running these versions of software show very high conversations on all resources that include the Top Conversations resources that include these devices.

First published date

10/22/2018 9:49 PM

Last published date

12/6/2022 1:43 PM

Overview

This article provides brief information on a bug found with Cisco 4500 series switches using Flexible Netflow running versions of IOS 15.2(2.1) or IOS XE 3.6(0).  The bug causes Netflow cached data counter to not clear out after the flow data has been sent out.  This can happen with random conversations and will not always be the same.

Confirm the bug using the Cisco Bug Search tool.

Cisco bug tracking numbers
CSCus49948
CSCuu89948


Note on environment: 
  • Cisco Catalyst 4500 switches running on IOS 15.2(2.1) or IOS XE 3.6(0) version of software

Product section

Netflow Traffic Analyzer

Cause

Devices running on these versions of software show a very high conversation data on all resources that include the Top Conversations resources with these devices.  

This can be confirmed by running a Wireshark capture  from the SolarWinds server that is collecting the flow data.

For example:

Resolution

The issue is fixed in the following releases:

Known Fixed Releases: 
  • 15.1(2)SG7
  • 15.2(2)E3
  • 15.2(2)E4
  • 15.2(3)E3
  • 15.2(4)E
  • 15.2(4)E1
  • 15.2(4)EA1
  • 15.2(4)EA2
  • 15.2(4)EA3
  • 15.2(4.0.68)E
  • 15.2(4.0.75a)E
  • 15.2(5.0.10)E
  • 3.6(3)E
  • 3.7(3)E
  • 3.8(0)E