Skip to main content

Cisco Flexible NetFlow configuration example (Flow templates)

Cisco 22 June 2022

flow record ipv4_record
match ipv4 tos
match ipv4 source address
match ipv4 destination address
match ipv4 protocol
match transport source-port
match transport destination-port
match interface input
collect interface output
collect counter packets
collect counter bytes
collect transport tcp source-port
collect transport tcp destination-port
collect transport tcp flags
collect routing source as
collect routing destination as
collect ipv4 source mask
collect ipv4 destination mask
collect timestamp sys-uptime first
collect timestamp sys-uptime last

flow record ipv6_record
match ipv6 source address
match ipv6 destination address
match ipv6 protocol
match ipv6 tos
match transport source-port
match transport destination-port
match interface input
collect interface output
collect counter packets
collect counter bytes
collect transport tcp source-port
collect transport tcp destination-port
collect transport tcp flags
collect routing source as
collect routing destination as
collect ipv6 source mask
collect ipv6 destination mask
collect timestamp sys-uptime first
collect timestamp sys-uptime last

flow exporter NFAexporter
destination 185.54.81.20
source GigabitEthernet0/2
transport udp 9996
export-protocol netflow-v9
template data timeout 60

flow monitor NFAmonitorIPv4
record ipv4_record
exporter NFAexporter
cache timeout active 60
cache timeout inactive 60

flow monitor NFAmonitorIPv6
record ipv6_record
exporter NFAexporter
cache timeout active 60
cache timeout inactive 60

==================================

Applicare su ogni interfaccia:

ip flow monitor NFAmonitorIPv4 input
ipv6 flow monitor NFAmonitorIPv6 input

 

Addendum:

flow record ipv4_record
match datalink source-vlan-id
match datalink dot1q priority
match datalink mac source-address
match datalink mac destination-address
match ipv4 version
match ipv4 tos
match ipv4 ttl
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input physical snmp
collect interface output snmp
collect counter flows
collect counter bytes
collect counter packets
collect timestamp sys-uptime first
collect timestamp sys-uptime last

flow record ipv6_record
match datalink source-vlan-id
match datalink dot1q priority
match datalink mac source-address
match datalink mac destination-address
match ipv6 version
match ipv6 protocol
match ipv6 source address
match ipv6 destination address
match transport source-port
match transport destination-port
match interface input physical snmp
collect interface output snmp
collect counter flows
collect counter bytes
collect counter packets
collect timestamp sys-uptime first
collect timestamp sys-uptime last

flow exporter NFAexporter
destination 192.168.222.59
source interface vlan 10
transport udp 9996
export-protocol netflow-v9
template data timeout 60
option interface-table timeout 60

flow monitor NFAmonitorIPv4
record ipv4_record
exporter NFAexporter
cache timeout active 60
cache timeout inactive 60

flow monitor NFAmonitorIPv6
record ipv6_record
exporter NFAexporter
cache timeout active 60
cache timeout inactive 60

interface te1/1/1
ip flow monitor NFAmonitorIPv4 input
ip flow monitor NFAmonitorIPv6 input

0 0 votes
Article Rating
Subscribe
Notify of

0 Comments
Oldest
Newest Most Voted
Goline It Services Logo

News

  • GOLINE is pleased to announce that it has achieved ESET Gold Partner status for 2027. The recognition follows the successful completion of ESET’s partner certification requirements and confirms GOLINE’s continued investment in cybersecurity expertise and professional development. ESET’s partner programme is designed to support companies working with its cybersecurity solutions through dedicated technical and sales resources, training and other partner services. For GOLINE, the achievement further strengthens its collaboration with ESET and its ability to integrate ESET security technologies into the cybersecurity solutions and services it provides to businesses. ESET solutions are already part of GOLINE’s cybersecurity portfolio, alongside technologies...
  • GOLINE SA is excited to announce a new partnership with NetApp, a global leader in cloud data services and storage solutions. This collaboration aims to help organizations modernize their IT infrastructure, streamline data management, and enhance performance across cloud and hybrid environments. Modern Data Solutions for Businesses Through this partnership, GOLINE integrates advanced data management solutions, enabling businesses to securely store, manage, and access critical information across cloud, on-premises, or hybrid setups. Clients can benefit from: Flexible and scalable storage solutions to meet growing data needs Simplified management of cloud and on-premises environments Enterprise-grade security for sensitive and mission-critical data...
  • GOLINE SA is proud to announce a new strategic partnership with Omnissa, a global leader in digital workspace platforms and Horizon Cloud Service solutions. This collaboration marks a significant step forward in helping organizations embrace secure, flexible, and high-performance work environments. Why Choose Omnissa for Your Business? The platform enables virtual desktops, applications, and unified endpoint management. Organizations can deploy scalable workspaces across cloud, hybrid, or on-premises setups. Key benefits include: Easy access to desktops and apps on any device Centralized management for Windows, macOS, iOS, Android, and ChromeOS Strong security with access controls and multi-factor authentication Automated scaling to...
  • Hosting Services
  • +41 (0)91 260 76 50
0
Would love your thoughts, please comment.x
()
x
| Reply