Вот в такой конфигурации наконец то заработало

!
! Last configuration change at 03:11:39 CHEL Sat Jun 28 2003
! NVRAM config last updated at 03:11:44 CHEL Sat Jun 28 2003
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname router
!
enable secret X
enable password X
!
username loger privilege 8 password 0 X
username admin privilege 15 password 0 X
!
!
!
!
memory-size iomem 12
clock timezone CHEL 5
clock summer-time CHEL recurring last Sun Mar 2:00 last Sun Oct 3:00
ip subnet-zero
no ip rcmd domain-lookup
ip rcmd rsh-enable
ip rcmd remote-host loger 10.242.81.2 kdl enable 8
ip flow-cache timeout active 10
ip domain-name domain.ru
ip name-server 10.242.80.4
!
!
!
!
!
!
!
interface Loopback0
ip address 10.242.11.1 255.255.255.0
no ip directed-broadcast
ip accounting output-packets
ip nat inside
!
interface FastEthernet0/0
no ip address
no ip directed-broadcast
no ip proxy-arp
ip route-cache flow
speed auto
full-duplex
!
interface FastEthernet0/0.1
description system
encapsulation dot1Q 1
ip address 10.242.80.1 255.255.255.0
no ip directed-broadcast
no ip proxy-arp
ip nat inside
!
interface FastEthernet0/0.2
description Employers
encapsulation dot1Q 2
ip address 10.242.81.1 255.255.255.0
no ip redirects
no ip directed-broadcast
no ip proxy-arp
ip nat inside
!
..................................
!
interface FastEthernet0/0.14
description izone
encapsulation dot1Q 14
ip address 217.150.X.X 255.255.255.248
no ip redirects
no ip directed-broadcast
no ip proxy-arp
ip nat outside
!
interface FastEthernet0/0.15
description suttk
bandwidth 512
encapsulation dot1Q 15
ip address 217.150.X.X 255.255.255.252
ip access-group inet in
no ip redirects
no ip directed-broadcast
no ip proxy-arp
ip nat outside
ip policy route-map inetloop
!
ip flow-export source FastEthernet0/0.1
ip flow-export version 5
ip flow-export destination 10.242.80.4 20001
ip classless
ip route 0.0.0.0 0.0.0.0 217.150.X.X
ip route 10.242.0.0 255.255.0.0 Null0
no ip http server
!
........................
!
ip access-list extended inet
deny   ip 10.0.0.0 0.255.255.255 any
deny   ip any 10.0.0.0 0.255.255.255
permit udp any eq ntp any
deny   icmp any any echo
permit icmp any any
permit udp any eq domain 217.150.X.X 0.0.0.7
permit tcp any 217.150.X.X 0.0.0.7 established
permit tcp any eq ftp-data 217.150.46.X 0.0.0.7 gt 1023
permit tcp any host 217.150.X.X eq www
permit udp any host 217.150.X.X eq domain
permit tcp any host 217.150.X.X eq domain
permit tcp any host 217.150.X.X eq 17593
permit tcp any host 217.150.X.X eq pop3
permit tcp any host 217.150.X.X eq smtp
access-list 1 permit 217.150.X.X
access-list 1 permit 10.242.81.38
access-list 1 permit 10.242.80.2
access-list 1 permit 10.242.81.2
access-list 1 permit 10.242.80.4
access-list 111 permit ip any 217.150.X.X 0.0.0.7
route-map inetloop permit 10
match ip address 111
set interface Loopback0
!
snmp-server engineID local 0000000902000001968174A0
snmp-server community public RO
!
privilege exec level 8 show ip accounting checkpoint
privilege exec level 8 show ip accounting
privilege exec level 1 show ip
privilege exec level 1 show
privilege exec level 8 clear access-template
privilege exec level 8 clear ip accounting
privilege exec level 8 clear ip access-template
privilege exec level 8 clear ip access-list
privilege exec level 8 clear ip
privilege exec level 8 clear
!
line con 0
exec-timeout 0 0
transport input none
line aux 0
line vty 0 4
access-class 1 in
password XXX
login
!
ntp clock-period 17180350
ntp master 4
ntp server 194.149.67.130
no scheduler allocate
end

Хотелось бы считать на loopback`е, но это не работает.
А так в экспорт идет весь трафик, который доходит до интерфейсов, включая широковещательные пакеты (windows в локальной сети особенно много их генерит). Придется теперь коллектор настраивать для фильтрации по адресам source и dest.
Пока трафик считается через ip accounting.