OER / PfR Learn List driving me nuts !!

Hi All,

I am having some trouble in getting my Learn Lists to match traffic in PfR.

With reference to this Cisco document:
http://www.cisco.com/en/US/docs/ios/oer/configuration/guide/pfr-profile.html#wp1062974

However, my Learn-Lists never show any stats other than 0, even though
the traffic is passing through the outside interface.

In brief, R6 is acting as the MC/BR and R4 is a BR with 2 outside
interfaces - these routers are in AS100.
R4 connects to R5 via a serial interface (S0/2/0), and R5 directly
connects to SW2.
R5 and SW2 are in AS200.

A quick traceroute from R1 (also in AS100) to SW2 confirms the route
taken is R4>R5>SW2.

Rack1R1#traceroute 150.1.8.8 source lo0
  1 155.1.146.4 4 msec 4 msec 0 msec
  2 155.1.45.5 12 msec 8 msec 8 msec
  3 155.1.58.8 12 msec * 8 msec

To provide suitable traffic I start a telnet session from R1 to SW2 and
run a "show tech":
Rack1R1#telnet 150.1.8.8 /source-interface loopback 0

The MC records the prefix o.k.:
Rack1R6#show oer master prefix
OER Prefix Statistics:
 Pas - Passive, Act - Active, S - Short term, L - Long term, Dly - Delay
(ms),
 P - Percentage below threshold, Jit - Jitter (ms),
 MOS - Mean Opinion Score
 Los - Packet Loss (packets-per-million), Un - Unreachable
(flows-per-million),
 E - Egress, I - Ingress, Bw - Bandwidth (kbps), N - Not applicable
 U - unknown, * - uncontrolled, + - control more specific, @ - active
probe all
 # - Prefix monitor mode is Special, & - Blackholed Prefix
 % - Force Next-Hop, ^ - Prefix is denied

Prefix State Time Curr BR CurrI/F
Protocol
                      PasSDly PasLDly PasSUn PasLUn PasSLos PasLLos
                      ActSDly ActLDly ActSUn ActLUn EBw IBw
                      ActSJit ActPMOS ActSLos ActLLos
--------------------------------------------------------------------------------
150.1.8.0/24 INPOLICY* @89 150.1.4.4
Se0/2/0 U
                               U U 0 0 73262
87865
                              11 12 0 0
1 3
                               N N

But it does not capture the telnet traffic:

Rack1R6#show oer master
OER state: ENABLED and ACTIVE
  Conn Status: SUCCESS, PORT: 3949
  Version: 2.2
  Number of Border routers: 2
  Number of Exits: 4
  Number of monitored prefixes: 1 (max 5000)
  Max prefixes: total 5000 learn 2500
  Prefix count: total 1, learn 1, cfg 0
  PBR Requirements met
  Nbar Status: Active

Border Status UP/DOWN AuthFail Version
150.1.6.6 ACTIVE UP 00:15:51 0 2.2
150.1.4.4 ACTIVE UP 00:15:51 0 2.2

Global Settings:
  max-range-utilization percent 20 recv 0
  mode route metric bgp local-pref 5000
  mode route metric static tag 5000
  trace probe delay 1000
  logging
  exit holddown time 60 secs, time remaining 0

Default Policy Settings:
  backoff 300 3000 300
  delay relative 50
  holddown 300
  periodic 90
  probe frequency 56
  number of jitter probe packets 100
  mode route observe
  mode monitor both
  mode select-exit good
  loss relative 10
  jitter threshold 20
  mos threshold 3.60 percent 30
  unreachable relative 50
  resolve delay priority 11 variance 20
  resolve range priority 12 variance 0
  resolve utilization priority 13 variance 20

Learn Settings:
  current state : STARTED
  time remaining in current state : 112 seconds
  throughput
  delay
  no inside bgp
  no protocol
  monitor-period 1
  periodic-interval 0
  aggregation-type prefix-length 24
  prefixes 100
  expire after time 720

  Learn-List seq 1 refname TEST
    Configuration:
     Traffic-Class Application: telnet
     Aggregation-type: prefix-length 24
     Learn type: throughput
     Session count: 50 Max count: 100
    Stats:
     Traffic-Class Count: 0
  Learn-List seq 2 refname TEST2
    Configuration:
     Traffic-Class Application: http
     Aggregation-type: bgp
     Learn type: delay
     Session count: 50 Max count: 100
    Stats:
     Traffic-Class Count: 0

Note that I have also tried it with HTTP traffic:
Rack1R1#copy
http://cisco:cisco@150.1.8.8/c3560-ipservicesk9-mz.122-53.SE1.bin null:

... with the same effect, i.e. no Traffic-Class Count hits.

As I am also running IOS 12.4(24)T2 on both OER routers I have also
tried matching application name using nbar with no success.

So any ideas what I am missing? Is it reasonable for me to assume that
the count will increase?

regards Andy

Blogs and organic groups at http://www.ccie.net
Received on Mon Apr 05 2010 - 00:33:57 ART