×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.
Lei Tian Fri, 09/13/2013 - 04:55
User Badges:
  • Cisco Employee,

Hi,

What field would you like to monitor from flexible netflow? Do you want use netflow to capture IPs and byte count only, like you have from IP accounting?

HTH,
Lei Tian

HTH,
Lei Tian

Sent from Cisco Technical Support iPhone App

jakewilson Fri, 09/13/2013 - 05:49
User Badges:

Hi Blackswans,


Lei Tian is correct.  What do you want to collect and export?  If you just want IP addresses and the total bytes. A configuration something like this will work.


!step 1 create the record 'ip-accounting-record'

flow record ip-accounting-record

match ipv4 source address

collect counter bytes


!step 2 create the monitor 'ip-accounting-exporter'

flow monitor ip-accounting-exporter

destination 10.10.10.10

source loopback 0

transport udp 2055

template data timeout 60


!step 3 create the monitor by tying the record to the exporter

flow monitor ip-accounting-monitor

record ip-accounting-record

exporter ip-accounting-exporter

cache timeout active 60


!step 4 apply the monitor to each interface

interface fastethernet0/0

ip flow monitor ip-accounting-monitor input

interface fastethernet0/1

ip flow monitor ip-accounting-monitor input

interface fastethernet0/2

ip flow monitor ip-accounting-monitor input


Then, you will need a good Flexible NetFlow collector.  I recommend Scrutinizer as it can dynamically handle unique templates like this.


Jake

www.NetFlowKnights.com

Actions

This Discussion