|
|
3.3 Setup Netflow Exporter(s)
Highly depends on hardware/software implementation.
Below are the sample we are suggests (Cisco ISR IOS 15+)
Notes:
Required: Set the correct date and time settings for the exporters.
Required: The source endpoint for each exporter must be unique.
flow exporter EXPORTER-1
destination [docker_ip]
transport udp [one_of_receiver's_port_that_you_added]
export-protocol netflow-v9
template data timeout 32
option interface-table timeout 64
option application-table timeout 96
exit
!
flow record rec_v4_v6
match ipv4 version
match ipv4 dscp
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match ipv4 source mask
match ipv4 destination mask
match ipv6 version
match ipv6 traffic-class
match ipv6 dscp
match ipv6 protocol
match ipv6 source address
match ipv6 source mask
match ipv6 destination address
match ipv6 destination mask
match application name
match flow direction
match routing is-multicast
match transport icmp ipv4 code
match transport icmp ipv4 type
match routing forwarding-status
match interface input
match interface output
match routing next-hop address ipv4
match routing next-hop address ipv6
match transport source-port
match transport destination-port
collect timestamp sys-uptime first
collect timestamp sys-uptime last
collect counter bytes
collect counter packets
!
!
flow monitor FLOW-MONITOR-1
record rec_v4_v6
exporter EXPORTER-1
cache timeout active 16
cache timeout update 16
cache timeout inactive 16
!
interface [interface_name]
ip flow monitor FLOW-MONITOR-1 input
ip flow monitor FLOW-MONITOR-1 output
ipv6 flow monitor FLOW-MONITOR-1 input
ipv6 flow monitor FLOW-MONITOR-1 output
!
|
Netflow Viewer