Updated October 14, 2016
This article provides brief information on a bug found with Cisco 4500 series switches using Flexible Netflow running versions of IOS 15.2(2.1) or IOS XE 3.6(0). The bug causes Netflow cached data counter to not clear out after the flow data has been sent out. This can happen with random conversations and will not always be the same.
Confirm the bug using the Cisco Bug Search tool.
Devices running on these versions of software show a very high conversation data on all resources that include the Top Conversations resources with these devices.
This can be confirmed by running a Wireshark capture from the SolarWinds server that is collecting the flow data.
The issue is fixed in the following releases:
Known Fixed Releases:
Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third party content at your own risk, and you will be solely responsible for the incorporation of the same, if any.